Known Vulnerabilities in REXML 3.3.6