That is true but slightly unfair, as sendmail has a much longer history than most MTAs, and it has been clean for quite some time.

CNN: Analysis: Linux security