Windows XP has a broken security model. Age has very little to do with it (aside from the fact that support ends in 2012, so it's only worth using for another couple years.)