Millions of Microsoft web servers powered by vulnerable legacy software