Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
zimbra collaboration server
zimbra collaboration server 8.8.11