Three zero-day vulnerabilities in SonicWall's Email Security product that were being exploited in the wild have been reported by American security firm FireEye's Mandiant Managed Defence unit.