Account for database connection is stored in .mdb file.
vulners.com/securityvulns/securityvulns:doc:4172