Vulnerabilities in plougher software