Winamp still vulnerable to attack