Attackers can delete data via holes in WS_FTP