Plain java software can also have exploits made for them but they are not as widespread so it is not as common or not worth the trouble