Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.
mitsubishielectric smartrtu_firmware -