I have to agree with RyanZAG, log4j seems a strange inclusion in this list.