49 vulnerable House Web sites

Not surprising at all. I've worked with these kinds of vendors (campaign sites), and they are bottom barrel non technical people with a couple connections.