OWASP ESAPI versions 2.0GA and 2.0.1 suffer from a symmetric encryption MAC bypass…. OWASP ESAPI versions 2.0GA and 2.0.1 suffer from a symmetric encryption MAC bypass.

Read more http://packetstormsecurity.com/files/123243/esapi-bypass.txt