Vulnerabilities in Apache Tapestry