Vulnerabilities in Oro, Inc software