Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791.Referenceshttp://www.securityfocus.com/bid/95899https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories