Synacor Zimbra Collaboration Suite (ZCS) prior to 8.8.3 has Persistent XSS.
synacor zimbra collaboration suite