Slashdot article about the security issue
Zimbra is sending Yahoo username and passwords in the clear (ie: not encrypted) when syncing with Yahoo Mail. In other words, you shouldn't use Zimbra Desktop to check for Yahoo mail on a public network and I'd be wary to do so even on a private one.
Please have Zimbra log in using secure IMAP.