CVE-2016-6532 (imaging_suite)
DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXIS_DATA SQL Server session.
Source: CVE-2016-6532 (imaging_suite)