City, state websites could be vulnerable to hackers