Vulnerabilities in Andrew Kane software