Synacor Zimbra Collaboration Suite (ZCS) prior to 8.7.10 has Persistent XSS.
synacor zimbra collaboration suite