Vulnerabilities in JBoss Richfaces 3.3.3