Vulnerabilities in Shibboleth software