Vulnerabilities in Apache Tomcat 6.0.40