SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.
solarwinds web help desk 12.7.0