Western Digital My Cloud Home and ibi devices prior to 2.2.0 allow clickjacking on sign-in pages.
westerndigital ibi
westerndigital my cloud home