Good thing I migrated from UBBThreads in time....

[AWS]

You have to consider the fact that threads is coded by one person while vbulletin is done by a team.
None the less exploits from threads perl version are still exploitable in the php version. Until threads is rewritten from the ground up these exploits will exist. Not to mention that there is an exploit that is 2 years old that still isn't fixed even after the fix was submitted to Rick. There is one that is over 5 years old that existed in wwwthreads perl v3.5 and is still exploitable in 6.5.4.