The State of Software Security in 2019