XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.
enphase envoy