Security risk with VoIP, say experts