Membership Inference Attacks Against Vision-Language Models