Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote malicious users to gain privileges.
mambo mambo site server 4.0.11