Default credentials

Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...