One in five small firms are still using Microsoft’s antique operating system despite the security risks.