Open-Xchange versions 7.8.0 and below suffer from multiple cross site scripting vulnerabilities.