The Web administration console on Polycom Trio devices with software prior to 5.5.4 has XSS.
polycom trio_8500_firmware