I hope you don't mean literally zero because there have been numerous Rails vulnerabilities in the intervening time. If you're been running the same instance for a few years unpatched and publicly accessible, chances are good your installation is owned.
