The number of software vulnerability disclosures is at its lowest point since the second half of 2005, according to a report from Microsoft.