Vulnerabilities in Bennett McElwee software