Vulnerabilities in JBoss Richfaces 3.2.2