BlogEngine.NET 3.3.7 and previous versions allows XXE via an apml file to syndication.axd.
dotnetblogengine blogengine.net