Vulnerabilities in heshanlk software