I used to have a lot of issues with security about a year ago for one of my client’s servers, most of the problems were related to his programer’s bad coding. There can also be problems at the operating system level and from my experience I have noticed that BSD is the most secure.