Vulnerabilities in Calvin Yu software