The State of Software Security in Healthcare