Product
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator to overwrite global Zimlet configurations and execute malicious JavaScript in a victim's session.