HTC security vulnerability reported