If there is a zero day in Xen, your attackers are probably also going to be having a very, very bad day.