Zimbra versions 8.0.9 GA and below suffer from a cross site request forgery vulnerability. Continue reading...