New data shows that hundreds of thousands of Exim servers are still running versions vulnerable to flaws disclosed and patched last year.