Dozens of counties and cites have bought thermal cameras made by firms blacklisted by the U.S. for their links to the Chinese government, according to a report.