OX App Suite 7.10.1 and previous versions allows Information Exposure.
open-xchange open-xchange appsuite