Attackers have been exploiting critical Zimbra flaw to steal emails