Factual error: When the first assassin drives to Waterloo station to take out Simon Ross and Bourne, he is driving a BMW 3 series with a 2006 UK licence plate. However the events in this film are meant to follow on six weeks after the previous film, which make it still set in 2004.
Suggested correction: Nowhere in either of the first 3 Bourne films indicate the year they are taking place.
Technically, there is a timeline. You may have to watch the films again, and read up on when production for each film began and wrapped. The Bourne Identity was filmed between October 2000, and Spring/Summer 2001 (Greece scenes). Supremacy (With the exception of the New York ending which was filmed two weeks prior to the release) was filmed between October 2003, and March 2004 Ultimatum was filmed between October 2006 and March 2007 (which explains the snow seen in New York) Identity takes place in the winter of 2000, while Supremacy is set two years later, with Ultimatum taking place six weeks after he escaped Moscow. Legacy takes place around the same time as Ultimatum, and the last Bourne film (Jason Bourne) is set ten years after the events of the Supremacy/Ultimatum timeline.
The year of filming can't be used as indication of when films are set.
Other mistake: In the paper file regarding Project Blackbriar Jason Bourne's bloodtype is noted as A+, but on David Webb's dogtags it's O-. Since David Webb is his real identity, O- must be his real blood type. If Bourne was injured and known to have blood type A+ (as it is stated in the docs), the person treating him would believe he was capable of receiving A+, A-, O+ and O-. However, since his real blood type is O-, he is compatible with type O- exclusively. So this would mean a 75% chance of receiving the wrong blood type in an emergency.
Suggested correction: This is not a movie mistake. Documents made for a new identity would have details changed to mislead. Moreover, if he is wounded in the field and needs a transfusion, no-one is going to be searching for blood type on files, they'd use plasma, O - or do a test on the spot.