Zimbra versions prior to 8.7 suffer from cross site request forgery vulnerabilities in the administrative interface.