Hi,
Windows 2000 was designed as a corporate operating system.
Windows XP was designed for home/consumer usage.
Windows 2000 is older, but has benefits and drawbacks in modern times, such as compatibility. It's extended lifespan ends June 2010 I believe.
Windows XP is newer by a year, and is one of the staging grounds against the Vista invasion.
. It has a larger user base, and is sufficient for most users.
I say 2000 is lighter, and probably a bit more secure out of the box (disregarding XP's built in Firewall), but with an adequate antivirus/firewall solution, either would do well security wise.