Is this hackable?

On a linux machine, I install a webserver (apache) with port 80. I block all other ports with iptables except for HTTP and ICMP. I only serve static html files through apache.

Is this machine still going to be vulnerable to hackers?