The Apache Tomcat servlet/JSP container has default files installed. These files should be removed as they may help an attacker to guess the exact version of the Apache Tomcat which is running on this host and may provide other useful information.