Great excuses for not fixing …
Great list of items for “No one at the organization knows about, understands, or respects the issue.” within the “8 reasons why website vulnerabilities are not fixed”-list (http://jeremiahgrossman.blogspot.com/2009/05/8-reasons-why-website-vulnerabilities.html):
http://www.veracode.com/blog/2009/05/but-thats-impossible/