The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.Referenceshttp://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htmhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5072http://www.securityfocus.com/bid/1562http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html
