Why shouldn't we use PHP 3.0.12

Sorry to bug everyone with this, but I could really use some help. Background: We are a hosting company hosting some custom applications and sites for various customers. We have one customer, who for several reasons insists that we use PHP 3.0.12. One of these reasons is that they use Midgard as a content management tool. We are not comfortable doing this as there have been various bugs, including security ones reported with older versions of PHP. There is even a piece on the midgard site (http://www.midgard-project.org/article/1604.html) that states Version 3.0.15 is the latest release of PHP. It includes some important security fixes and also contains many other improvements. I have pointed this and the PHP 3 changelogs out to the client and used this as motivation to not provide this version of PHP3 for public access. But they are insistent that I either a) Explain what the problem is with PHP 3.0.12 that prevents us from using php 3.0.12, in laymans terms. or b) Go ahead and do it. I would really appreciate it if someone here could help me out with what to tell them. They do not understand the concept of a buffer overflow, and I see amongst other things, several buffer overflows fixed since 3.0.12. Any assistance would be GREATLY appreciated! -- - A Complete Luser E-mail: acompleteluser@penguinpowered.org.uk