Kiteworks Totemomail up to and including 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.