Bounds for joint portfolios of dependent risks