VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions.
https://exchange.xforce.ibmcloud.com/vulnerabilities/28532
http://www.securityfocus.com/bid/19659
http://www.securityfocus.com/archive/1/444060/100/0/threaded