Social-networking sites rife with wormable flaws