and session hijacking bugs fixed. for more info see: http://tomcat.apache.org/security-4.html
www/jakarta-tomcat.