Folks,
8.7.0 has some critical CVE's in regards to the php module installed. I have included all the info we found on a scan in this bug. Please vote if interested.
https://bugzilla.zimbra.com/show_bug.cgi?id=106580
Regards,
Pablo Garaitonandia
Penn State University