tomcat: multiple vulnerabilities

Tomcat really is a horrible piece of work. The code looks like it's written by absolute beginners. I think these vulnerabilities are only the tip of the iceberg..