New report says many government and private sector security flaws are 'surprisingly common' and can be exploited by unsophisticated hackers.