Joomla is the more popular of the two... since Joomla is easier to manage, most inexperienced, clueless noobs choose to build their sites using it. Unfortunately, Joomla also has more vulnerabilities - it's hacker-favorite.
My recommendation goes for Drupal - it's solid, stable and secure (cons...