Vulnerabilities in Curtis Crewe software