[Tomcat, HTTPD, Servlets & JSP] - Re: CVE-2007-3382/3385 + JBoss 4.0.3SP1