as you guys know java is very vulnerable and I had to install a YEAR OLD VERSION OF JAVA!!
On my Windows box, MultiBit (Classic) works perfectly fine with the most recent Java SE8.
Who said this? "Java is more vulnerable" is a popular factoid.
Agreed. The vulnerabilities you often hear about relate to the Java sandbox, not to Java itself. The sandbox is responsible for enforcing security rules on untrusted applications, typically run from inside a web browser. (Yes, the Java sandbox is infamous for its security bugs, and deservedly so).
MultiBit does not run inside a sandbox because it is not an untrusted app (you do trust it, don't you?). It has just as much access to your PC as any other normal Win32 app.
Also, if you have a need to, nothing prevents you from installing multiple versions of Java, in which case browser-based Java apps requiring the sandbox will use the most recent version by default.
