Vulnerabilities in Compass Plus Ltd software