Nine out of 10 websites have vulnerabilities open to attack, according to a new report by WhiteHat Security.