Honestly... If I didn't want to be a target, I wouldn't choose a job as Barak Obahma's security henchman.

If I wanted to run a cms which was less prone to being taken out. I would not choose one with a bad security record, no commercial support, and a user base of a few million users/installations.

If I wanted to wreak havoc on the internet community I would choose a cms with a bad security track record, one which broadcasts specific instructions on how to bring the website down, has no commercial support, and a few million installations, and let loose with an automated script. My chances of hitting something would be a lot better.

Don't forget about the open source cms's who love to tag the version number directly in the template. Those are the best ones to attack when your just learning.

That rules out half of the CMS's out there as a good choice for a secure cms to say the least.

__________________
James Weisbrod - programmer