Vulnerabilities in David Cole software