Main security holes on win 2000?

I am auditing a heavy and important system related to electronic payments in a governmental agency. I need to know: which are the main security holes inherent in windows 2000 enterprise edition?