Vulnerabilities in Drupal software