Packetstorm's 2001 exploit wrapup...
they also publish monthly wrapups.
Can we say 50% Unicode attacks?