Microsoft knew of SharePoint security flaw in May, initial patch ineffective