Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.