Vulnerabilities in JBoss Richfaces 3.1.5