In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.
icewarp mail server