Vulnerabilities in James Lao software