The Small Business Administration bought software for $14.2 million dollars, but the contractors delivered a vulnerable product.