Zoho ManageEngine ADManager Plus prior to 7110 is vulnerable to blind XXE.
zohocorp manageengine admanager plus
zohocorp manageengine admanager plus 7.1