Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19819
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0905