There is Open Source Vulnerability Database (OSVDB) Vendor Dictionary available at http://www.osvdb.org/vendor_dict.php
Common e-mail address and/or security contact is available in that list, for example http://www.osvdb.org/vendor_dict.php?section=vendor&id=1229&c=S (Symantec). Additionally, Secunia has their Products => Software section page available, http://secunia.com/product/#software for example http://secunia.com/product/164/ (Sophos). You can select 'Vendor' link to visit vendor's home page. Look at 'Contact Us' etc. However, you waited for reply to your question only three hours. Check those lists and send your analysis to them. Regards, Juha-Matti _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
