Apache Myfaces Vulnerabilities