Known Vulnerabilities in hibernate4