Spring ME provides an implementation of Spring to Java based platforms not supporting reflection. Think Java ME and GWT. It allows you to use a plain old Spring application context, and turn that into a BeanFactory you can use at runtime.
There are no reported vulnerabilities