PKCS7 is easily turned into a padding oracle if the encryption is malleable. TLS' problem, if I recall correctly, is that it doesn't verify the MAC before unpadding the message. Exploiting this, in a properly designed system, would require being able to forge the MAC.