tomcat 7.0.37

Closes #17949.

Signed-off-by: Adam Vandenberg <flangy@gmail.com>