Universal Adversarial Attack on Aligned Multimodal LLMs