Vulnerabilities in Avaya software