Vulnerabilities in csshero.org software