Cisco sewed up two serious vulnerabilities in its widely deployed IP telephony software that could allow attackers to initiate a system shutdown or takeover.