Vulnerability discovery in multiple version software systems : open source and commercial software systems