Vulnerabilities are high in new applications, expert says