How can exploratory testing uncover bugs missed by scripted testing?