As a general rules treat a VM like you would a physical machine, they have the same weaknesses.