Researchers publicly warn that multiple HP firmware vulnerabilities remain unpatched after a year