7.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2012-01-19	CVE-2011-3375	Information Exposure vulnerability in Apache Tomcat Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data. network low complexity apache CWE-200	5.0
2011-11-11	CVE-2011-3376	Permissions, Privileges, and Access Controls vulnerability in Apache Tomcat org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality. local apache CWE-264	4.4
2011-04-08	CVE-2011-1475	Improper Input Validation vulnerability in Apache Tomcat The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users." network low complexity apache CWE-20	5.0