Vulnerabilities in Apache Cocoon