An issue exists in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
zohocorp manageengine assetexplorer 6.5