Note that a hash collision is not the same as a pre-image attack. Though it seems to me that finding the latter is also feasible.