The New York AG's office says five company's apps were prone to man-in-the-middle attacks.