SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
solarwinds webhelpdesk 12.7.0