Vulnerabilities in David O'Callaghan software