Why old cybersecurity vulnerabilities are still a big problem