Known Vulnerabilities in hibernate3-entitymanager