Well I remember when the Ubuntu installer left your root password in a clear text file that was world readable on your FS.[1]
I would really like to see a top 10 list of software blunders, I think everyone on HN would.
1. https://launchpad.net/ubuntu/+source/shadow/+bug/34606