Serious security flaw in AOL Instant Messenger