Thousands of Zimbra servers vulnerable to actively exploited flaw