Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information.
https://exchange.xforce.ibmcloud.com/vulnerabilities/27810
http://www.vupen.com/english/advisories/2006/2887
http://www.securityfocus.com/bid/19073
http://www.securityfocus.com/bid/19071
http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml