Vulnerabilities in commenthol software