I've done a little bit of asking around, and the security folks that I have spoken to like Microsoft's Exploitable Crash Analyzer. Not only is it useful for junior-level testers, but it also makes life easier for security consultants. The tool had to be one of Microsoft's more interesting development techonlogies, and the fact that its source code is availabe is an added bonus. I'm told by Microsoft that there will be more tools and techiques disclosed in the near future, including ones that address high-signal noise vulnerability detection and overlay the output of multiple tools where they intersect.