Simple security flaws in a widely used U.S. shipping platform left customer data exposed and could have been abused.