Vulnerabilities in JBoss Richfaces