Updated Apache POI & Xml Beans for CVE-2014-3574  and  CVE-2014-3529. Also, temporarily disabled the transitive dependencies check rule since it cannot handle "provided" dependencies.