The vulnerabilities have been fixed.
There aren't many websites that require java other than games. Most are used within businesses.
Java was an easy way for a programmer to build interactive applications that could run on their own websites without having special permissions from a site and grant permissions to users. There are still some sites that use java and if you land on one you can easily activate if you feel safe in doing so with browser options. HTML 5 will replace some/most of this need.
There must be someone using java as Oracle has published plans for releases out thru 2016.