Vulnerabilities in Sophos software