OX App Suite up to and including 7.10.3 allows stats/diagnostic?param= XSS.
open-xchange open-xchange appsuite 7.10.2
open-xchange open-xchange appsuite 7.10.3