fixed false positives related to Apache POI and MS Office CPE/CVE per issue #126