Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
Synacor Zimbra Collaboration before
Exploit
CVE-2014-8563
NVD
Refer to CVE-2014-8563 NVD advisory