Vulnerabilities in medical apps