scanning web server bugs