Passwords are stored in cleartext, remote control is enabled by default with default password.
vulners.com/securityvulns/securityvulns:doc:4643