Just to show you how easy it is today to create collisions on MD5:
One could create collisions using Marc Steven's HashClash on AWS and estimated the the cost of around $0.65 per collision.
These 2 images have the same md5 hash: 253dd04e87492e4fc3471de5e776bc3d
If you want to test it yourself, you may need to take images from the link below. Currently they are put on AWS which should not change the images in any way, but IMGUR, the default image cache for StackExchange, does seem to change the images.
Reference: http://natmchugh.blogspot.com/2015/02/create-your-own-md5-collisions.html