[_Codemonkeyism]

Not sure what 'horrible security bugs' in Java you are referring too.

If those you refer too, and there are many, are exploits in browser plugins, sandboxes or the JVM, these are written in C(++).