Open-Xchange App Suite versions 7.10.6 and below suffer from OS command injection and cross site scripting vulnerabilities. One particular cross site scripting issue only affects versions 7.10.5 and below.
145c2f74cfe9370dfbec4b0f72f06c5a67138afef07940be7a7e97d9a4b1f072