Report: A majority of web apps have security holes