A group of researchers has discovered that many of the web's most popular content management systems are using obsolete algorithms to protect their users' passwords.