Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.
CWE-611, CWE-611