Operation EmailThief: Zero-day XSS vulnerability in Zimbra email platform revealed