Known Vulnerabilities in JBoss Richfaces -