Gmail accounts 'wide open to exploits'