I've managed to pass a null String to org.zkoss.lang.reflect.Fields.set() which causes this.setValue(new BigDecimal(str)); in Decimalbox.setValue(String) to throw an NPE.

I think the correct code is:

	public void setValue(String str){
		this.setValue(str == null ? ((BigDecimal)null) : new BigDecimal(str));
	}