In January, eEye discovered a serious bug in the Java Network Launching Protocol, which is used to run Java programs over the Web.