Vulnerabilities in Nelson software