Sending Mixed Signals – What Can Happen in the Course of Vulnerability Disclosure