Participants in Maryland's first bug bounty program uncovered more than 40 vulnerabilities affecting the state's websites.