VMware fixes three critical flaws allowing auth bypass, VM escapes