NCH Express Accounts 8.24 and previous versions allows local users to discover the cleartext password by reading the configuration file.
nchsoftware express accounts