Vulnerabilities in JBoss Richfaces 3.1.4