Verizon patched a vulnerability in an API used by its My FiOS mobile application that allowed any user access to any Verizon email account.