Vulnerabilities in OpenMRS software