Investigations into the hash collision DoS problem revealed an unrelated DoS vulnerability in how Tomcat handled large numbers of parameters; this is fixed in new versions of Tomcat 7, 6 and 5.5