"A legacy flaw in the latest version of the multi-protocol IM client is said by the company to be of 'extremely low risk', but could be part of a worrying trend"