They affect different Tomcat versions from 7.x branch, so don't let users of VuXML be fooled on the affected software for each vulnerability. Feature safe: yes