vulnerabilitys found at the webserver