Vulnerabilities in Thomas Schiffler software