Java flaws open door to hackers