TORONTO (Reuters) - Software vulnerabilities in a Hyundai Corp app that lets a car be started remotely made the company's vehicles susceptible to theft from high-tech thieves for three months before the company fixed the bug in March, a cyber security firm said on Tuesday.