VMware Security Advisory – Update for VirtualCenter updates the Tomcat package to version 5.5.27 which addresses multiple security issues that existed in the previous version of Apache Tomcat.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75161/VMSA-2009-0002.txt
Source: https://packetstormsecurity.com/files/75161/VMware-Security-Advisory-2009-0002.html