SQL & PL/SQL

I am not quite sure the valid scope of a package variable when using a web application and call oracle procedures.

For example, I have a web application, one of the report page will call an oracle procedure A which use a package B. Package B has a variable C which is a table of number type.

Package variable is shared in the same session. So I know that inside the procedure A, serveral calls to package B's function will share the same values in variable C. But what happens if different users concurrently viewing the same report(so procedure A is calling corrently by different users that using the web application)? Would a new session is created in Oracle to handle each user's request to run procedure A? or only one session will be created if all request from the web application are all using the same username/password?

I want to make sure the package variable's data won't be shared by a different web application user that using the package in the same time. Please give me some advice.

Thanks in advanced