Known vulnerabilities that were never patched – Microfinance-CERT