Zimbra patched a flaw that let hackers hijack accounts just by sending an email

Zimbra owner Synacor has released a new version of its collaboration software, and users should install the update as soon as they can. Zimbra "Daffodil" 10.1.19 includes a fix for a stored cross-site scripting (XSS) vulnerability that could be exploited to compromise customers' machines through Zimbra's Classic Web Client.