CVE-2015-3001
SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
Date published : 2015-06-08
http://www.securityfocus.com/bid/75035
http://www.securityfocus.com/archive/1/535679/100/0/threaded