Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors