One issue I see there, is the alias of your usuario
table. The use
could be a keyword for DB engine. If you are using MySQL, check this 9.3. Reserved Words
<sql-query name="finByCorreo" >
<return alias="Usuario" class="Model.TO.Usuario" />
SELECT ut.Correo AS {Usuario.correo},
AES_DECRYPT (ut.Password,'escom') AS {Usuario.password},
ut.Nombres AS {Usuario.nombres},
ut.ApellidoP AS {Usuario.apellidoP},
ut.ApellidoM AS {Usuario.apellidoM}
FROM usuario ut ------------------- here ut instead of use
WHERE ut.Correo LIKE :tags
</sql-query>