If you run ZAP multiple times against a target then you may well find that the results are subtly different even though the target has not changed. This is not unusual, and we do not consider this a significant problem. In our experience it is usually all down to how the application is explored - the traditional and ajax spiders seem to be sensitive to small changes, including things like network speed.
