WebHelpDesk includes Tomcat but not the Apache HTTP server. You're best bet is to rely on WHD updates to handle keeping it up to date.
You can (and a number of people do) use Apache HTTP server as a proxy to WebHelpDesk to handle things like single sign-on and the like. But if you're doing that, you installed the Apache HTTP server yourself so you'd need to handle maintenance of it on your own.
Sorry i meant the Tomcat element - security vulnerabilites are always coming out so a speedier hot fix program would be useful.
on the latest update there was only the WHD engine updates i believe and not Tomcat so visiblity of this would be useful