That Exim seems to have a relatiely high density of RCE vulnerabilities that are being made public regularly.

(The track record is considerably worse than other widely used Unix MTAs, roughly on par with MS Exchange.)