Vulnerabilities in Apache Tomcat