Vulnerabilities in Apache Cocoon 2.1.12