Determining vulnerability of target hosts