Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.11.1 allows stored XSS.
proofpoint insider threat management