Backdoor Vulnerabilities in Normally Trained Deep Learning Models