7.0.9

DATE	CVE	VULNERABILITY TITLE	RISK
2011-11-11	CVE-2011-3376	Permissions, Privileges, and Access Controls vulnerability in Apache Tomcat org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality. local apache CWE-264	4.4
2011-04-08	CVE-2011-1475	Improper Input Validation vulnerability in Apache Tomcat The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users." network low complexity apache CWE-20	5.0