A chronology of attack applets
February 96: DNS flaw in JDK 1.0.1
March 96: Princeton Class Loader bug
May 96: type casting attack
June 96: Array type implementation error
July 96: More type casting problems
August 96:Flaw in Microsoft’s Java VM
February 97: Invasion of Privacy attack applets
April 97: Code signing flaw
May 97: Verifier problems discovered in many VMs
All of these bugs have been fixed.