The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951).
https://exchange.xforce.ibmcloud.com/vulnerabilities/27438
http://www.vupen.com/english/advisories/2006/2583
http://www.securityfocus.com/bid/18701
http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml