Synacor Zimbra Collaboration Server 8.x prior to 8.7.0 has Reflected XSS in admin console.
synacor zimbra collaboration server