H2 Security Flaw is Critical, Says Experts