Crypt Server prior to 3.3.0 allows XSS in the index view. This is related to serial, computername, and username.
crypt-server project crypt-server