Funny what your web site's traffic analysis shows up sometimes. There's a fascinating series of notes on the VNC 4.1.1 exploits on the
Milw0rm forum. Go take a look at their
search function and type in VNC. The videos of Metasploit should help focus your mind on updating your clients. :-)