Experts warn of serious security flaws that facilitate phishing attacks and data theft.