Is facebook vulnerable in web applications

Yes, facebook is very vulnerable to an 'Med' level attack, so far im going to scan again because I just got an new OS installed (ubuntu netbook edition).