password manager vulnerabilities