A website run by google (picasa.google.com) was defaced using a known exploit of phpbb2.
You can find some info on this at http://www.zone-h.org/en/news/read/id=4436
For me, this highlights that vulnerabilites are more focused on applications these days than anything else.
-brett