Vb.net Format String Vulnerability