Patch these security flaws if the software is still running on your systems, the US cybersecurity authority has warned.