Our issue was the version of Java. You have to use an old version that was exploitable. I don't remember its been so long ago we just moved to newer gear and really haven't looked back. We do have one client we manage a pix 501 for that doesn't want to upgrade and we just use the command line on it. I don't think there is anyway. Check the Cisco forums.