Vulnerabilities in winscp.sourceforge.net software