Zone Labs denied the flaw for nearly two months, then eventually chalked it up to a “bug” in the software -- even though instructions to contact the servers were set out in the program’s XML code. A company spokesmodel says a fix for the flaw will be coming soon and worried users can get around the bug by modifying their Host file settings. However, there’s no truth to the rumor that the NSA used ZoneAlarm to spy on U.S. citizens.More details over at InfoWorld.
Is ZoneAlarm spyware?

According to James Borck ZoneAlarm 6.0 is spyware, as it sends encrypted data back to four different servers, despite disabling all of the suite's communications options.