Cisco estimated that approximately 50 percent of Internet-facing servers running PHP software are too outdated to install official security patches