Known Vulnerabilities in hibernate4-testing