Incident and Resolution

On Sunday, August 31, Zimbra’s information security and technology team noticed unusual activity on the Zimbra vBulletin forum on We immediately took steps to limit the impact of the malicious activity.

  • This did not affect customer, partner or employee data.
  • This was not a breach of Zimbra products.
  • Immediate action was taken to ensure proper incident remediation, including consultation with the appropriate authorities.

As part of our risk mitigation plan, the Zimbra forums that are supported by vBulletin have been temporarily taken down for patching and upgrades. This includes all forums that provide crowdsourced support for Zimbra Collaboration. Neither Zimbra Support nor forums at (forums for Zimbra Community and legacy Telligent software) were affected.

Thank you for your patience and understanding related to the temporary turn down of We apologize for the inconvenience. Please know that we are taking this incident seriously and working quickly to resume normal operations. We expect a resolution within the next 48 hours.

38 Responses to Incident and Resolution

  1. jignesh September 5, 2014 at 6:58 AM #

    Any news on forum to get back?

    Thank You.

    • Avatar photo
      Matthew Lewis September 5, 2014 at 8:21 AM #

      I will see what I can find out and share an update. Thank you.

    • Jennifer Emerson September 5, 2014 at 9:39 AM #

      Hi jignesh! I’m Jenn, Zimbra’s community manager. The forums are going to be down for a few more days unfortunately. Please stay tuned to our Twitter handle @Zimbra for more updates. If you have an issue you need urgent help with, we can try to solve it here. Just let me know.

  2. marco September 9, 2014 at 8:28 AM #

    Hello, I am trying to use Zimbra for the first time.
    Unfortunately, my emails are not automatically downloaded. I set the download every minute. Only, when I manually click on send/receive I can receive the emails. I was hoping that the forum could give some info but it is down. Any help?

    • Jenn September 9, 2014 at 9:49 AM #

      Hi Marco, I’m Jenn, Zimbra’s community manager. I will do my best to help you. I have a few questions for you to help me understand your issue better. I am going to send you an email to the address you provided to make this comment. Is this email address one that you can get to?

  3. Mulenga Bwalya September 9, 2014 at 11:11 AM #

    ZCS-6.0.16_zmmailboxdctl not running

    We are migrating our mail server from a 32-bit ZCS 6.0.16 (on Ubuntu 8.04.4 physical server) to a 64-bit ZCS 6.0.16 (Ubuntu 8.04.4 on a VMWare VSphere 5.5 VM).

    Each time I start the services and show zmcontrol status I am getting zmmailboxdctl not running.

    A check in the vi /opt/zimbra/log/zmmailboxd.out I am seeing a line that says:

    Invalid initial heap size: -Xms5948m
    The specified size exceeds the maximum representable size.
    Could not create the Java virtual machine.

    While in the I do tail -f /var/log/zimbra.log I see a message that says;

    zmmailboxmgr not running

    A portion of my /opt/zimbra/bin/zmmailboxdctl is as below:

    javaXmx=$(expr ${memkb} ‘*’ ${mailboxd_java_heap_memory_percent} / 100 / 1024)
    javaXmn=$(expr ${javaXmx} ‘*’ ${mailboxd_java_heap_new_size_percent} / 100)

    A search on the Internet shows that your Zimbra forum website is under maintenance.

    Kindly help,

    • Jenn September 9, 2014 at 3:42 PM #

      Hi Mulenga. This is Jenn, Zimbra’s community manager. I’m going to run your issue by our team and see if we can get answer for you.

  4. marco September 9, 2014 at 1:11 PM #

    Yes Jenn, you can use this one. It is a masked email. But I will receive it. Thanks.

  5. Ahmad Rajib Askory September 10, 2014 at 2:02 AM #

    Hi Jenn, How many days we have to wait for Forum? I need to migrate debian postfix mail system to Zimbra. My email delivery of new zimbra is a little bit slow with local domain. I have to fix it

  6. Jenn September 10, 2014 at 9:51 AM #

    Hi Ahmad. I still do not have an ETA on the forum. I’ll see if I can get some help for you on your issue. To confirm, you are saying you are using the open source version of Zimbra Collaboration 8.5? Please advise.

  7. Jenn September 10, 2014 at 10:14 AM #

    Mulenga, I sent you a response to the email you provided when you signed up to make a comment here.

  8. Ahmad Rajib Askory September 10, 2014 at 10:20 AM #

    Hi Jenn, Thnx 4 your quick reply. I have a domain which is on Zimbra 8.0.6 open source(without SSL Heartbleed Fix) with 2 multimaster ldap,2 mailbox (1 Backup),1 MTA Memchach & Proxy which is running very swiftly with Cent OS 6.4 & Xenserver 6.2.It takes 2 or 3 seconds for self test mail incoming from HTTPS. But Another domain I have setup with same setup with latest 8.0.6 (Heartbleed Fixed) and Cent OS 6.5. But here it takes 7 or 8 seconds for message delivery to inbox with self test from HTTPS.I m very worried about that cause it is going to be in production.

  9. Jenn September 10, 2014 at 11:28 AM #

    Ahamad, check your email for some advice on your issue. :)

  10. Stuart Gilberd September 10, 2014 at 3:44 PM #

    Is this why our staff have started receiving Zimbra targeted Phishing emails? The list of recipients seemed to be those who would have signed up to forums.

    • Jenn September 10, 2014 at 3:53 PM #

      Hi Stuart. May name is Jenn; I’m Zimbra’s community manager. I have been assured that no member information was touched. I am going to send you some more information using the email you provided to make your comment here.

  11. Jason September 10, 2014 at 4:41 PM #

    You guys are still down? You guys said 48 hours but it’s been 7 days now…

    • Jenn September 10, 2014 at 4:58 PM #

      Hey Jason. Sorry. We’re working on it. We’ll have an update soon. Please stay tuned to our Twitter handle @Zimbra for updates. Is there an immediate issue you need help with?

  12. Reymund Edra September 10, 2014 at 9:33 PM #

    Hi ma’am Jenn can I ask a regarding for the computation of disk usage in zimbra server?

    • Jenn September 11, 2014 at 10:14 AM #

      Sure thing, Reymund. I just sent you an email with some questions to help me help you.

  13. Koen September 11, 2014 at 10:45 AM #

    Hi Jenn,

    Sorry to bother you but I have a Zimbra 8.5 that is running great for 99% only problem that I have is when I add a file as an attachment to a reply in the webinterface (ajax/default) the screen get’s greyed out with following message: “No such message part” and the upload isn’t complete afterwards. Attaching the same or an other file overwrites the faulty attached file and you can send the mail fine afterwards. Tried it with FF 32 and IE10 in WIN7Pro and it only happens with a reply never with a new message.

    Could you please add this as a bug report?

    Kind regards,


    • Jenn September 11, 2014 at 11:29 AM #

      Hi Koen. You’re never a bother. :) I will provide this feedback to our team. If they have a solution, I’ll send it your way. If it truly is a bug, we’ll definitely make a report. Thank you so much. We really appreciate you.

    • Amauri June 5, 2015 at 7:48 AM #

      Good morning Koen, you could find a solution, because I am having the same problem on Zimbra 8.6.0 . Grateful !

    • Jorge de la Cruz June 11, 2015 at 9:53 AM #

      Hi Amauri,
      Please upgrade to Zimbra Collaboration 8.6, and apply the latest patch 2, should fix your issue.

      Have a good day and let us know.

  14. Jose September 11, 2014 at 10:56 PM #


    Is there an ETA yet? I don’t have to tell you, but being down this long is not only very worrisome (and getting scarier every day because it looks like a major hack now), but it’s killing your community as people venture out to find other sources of Zimbra information. I personally need access to the vast troves of knowledge locked away in your forums…

    • Jenn September 12, 2014 at 11:43 AM #

      Hi Jose. News is coming soon. I understand your concern. I really appreciate it. Please stay tuned.

  15. Aubrey Kloppers (aka cyber7) September 12, 2014 at 2:23 AM #

    It is with great difficulty that I express my disappointment with Zimbra (company) and Zimbra staff regarding the outage of the forums. We use the forums as permanent reference for our in-house development team. After the initial crash and the 48hrs notice, I am most disgusted with the inability for the Zimbra staff to get this back up and running.

  16. Lars September 12, 2014 at 8:31 AM #

    More or less same issue here with zcs 8.5 patch 1 :
    When replying in webinterface with Ie 10 or 11 the reply writes all the previous messages on 1 line.
    Also the ajax interface gives problems.
    Thanks !

    • Jenn September 12, 2014 at 11:47 AM #

      Thanks for the feedback Lars. I’ll see if there is a solution and send it to you via email.

  17. Thom September 12, 2014 at 3:05 PM #

    Any update on when the discussion board will be up?

  18. Peter B September 13, 2014 at 3:12 PM #

    Oh, Yes… the “Forums” will be “up” as part of the new “Community” board…
    Be ready to loose you sanity when you try to use them.

    • Jenn September 13, 2014 at 4:25 PM #

      Hi Peter. I know change is difficult. It’s going to be different certainly, but it’s not going to be difficult. I know most members are really going to like it once they get used to it.

  19. Jose September 21, 2014 at 3:36 AM #

    Very poorly handled migration. Started off with some sort of “hack”, then took the opportunity to migrate? I know you guys just bought Zimbra, but come on!

    Great way to start off by showing the community how much you understand it’s needs.

  20. Jose September 21, 2014 at 3:42 AM #

    For crying out loud, this is pathetic. You guys can’t even maintain a forums let alone the Zimbra codebase.

  21. chul September 30, 2014 at 9:36 AM #

    Jose, +100500!

  22. Marek October 10, 2014 at 5:56 AM #

    Any updates here? I have same problem. ZCS 8.5 Patch 1 W8.1 Chrome 37.0.2062.124 m

  23. RAJESH.V November 26, 2014 at 4:02 AM #

    How to restrict the admin user to create a users on particular domain in zimbra .Let the option to change quota and passwords remain .

  24. Rob Howard December 8, 2014 at 3:44 PM #

    Hi Rajesh,

    Best place to ask this question would be here:


Copyright © 2022 Zimbra, Inc. All rights reserved.

All information contained in this blog is intended for informational purposes only. Synacor, Inc. is not responsible or liable in any manner for the use or misuse of any technical content provided herein. No specific or implied warranty is provided in association with the information or application of the information provided herein, including, but not limited to, use, misuse or distribution of such information by any user. The user assumes any and all risk pertaining to the use or distribution in any form of any subject matter contained in this blog.

Legal Information | Privacy Policy | Do Not Sell My Personal Information | CCPA Disclosures