Zimbra version 8.6.0_GA_1153 build 20141215151110 suffers from a cross site scripting vulnerability. Continue reading...