Well, I think this is a separate issue but agree with you about standardizing on versions of dependencies.
A clean-up is probably the way to go. I guess we should just create issues whenever we need to upgrade a dependency.
The project structure of Apache Directory Server is complex, with quite a few project.xml files, so this sort of version confusion will occur. Perhaps we could simply maintain a wiki page which listed current dependencies or have a maven goal which checks different versions?