Apple has released an updates to Java for Mac OSX Server and Client 10.6 to address server vulnerabilities which are dated. This includes a fix to prevent an unsigned applet from execution outside the sand-box, proper handling of MACH RPC messaging and improvement to handling window bonds.
Users should apply this update via Software Update, no restart is needed. Users also should clear out their Java Cache. For More information please see reference link.