Update for VirtualCenter updates the Tomcat package to version 5.5.27 which addresses multiple security issues that existed in the previous version of Apache Tomcat.  The relevant releases are VirtualCenter 2.5 before Update 4.

This vulnerability can be exploited remotely only if the attacker has access to the Service Console network.  Security best practices provided by VMware recommend that the Service Console be isolated from the VM network. Please see http://www.vmware.com/resources/techresources/726 for more information on VMware security best practices.