Attackers have been exploiting critical Zimbra flaw to steal emails

A simple email gives the attackers the ability to remotely inject OS commands.

Preview courtesy of Ars Technica. The full article opens on their site.