Apache is just as vulnerable as any other software out there. And arguing about this moot. You like Apache. I like apache; do I have a choice in this matter about what I use? Yes and no. yes, on some servers that i maintain, and No on some servers that i maintain. I use both IIS and Apaceh, does that make me a bad administrator if i need information on IIS? No, it means im looking for ways to better IIS for the sites that I administer using a IIS server.
Do you run a server on a windows machine (apaceh or not) Same difference.
Apache may not have had many "patches", but patches are released none the less. And support, since its free, is pretty much up to the "user" to find it, whereas, I dont have much to worry with MS when it comes to support (getting quesionts answered).
We can argue on this all you like. I dont mind putting up defenses for IIS and Apache; they are both good servers...so to each his own, okay?
Telling someone to get 'apache' just because you dont like it, is not answering the question at hand. If they wanted to get apache, they would have done os and asked about that instead. If they have to use IIS, dont patronize the poster for using it.