EU-backed surveillance software for detecting child abuse has serious flaws, manufacturer admits