LMS vulnerabilities