Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml.
zohocorp manageengine remote access plus