CVE-2017-17552

/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 – 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted.

Source: CVE-2017-17552