Null Session: Windows XP

Some existing vulnerability that MS hasn’t done anything about.
An article

It appears that null sessions are required by a few applications, although I am not aware of how this works. If that were to be true, then the flaw is actually a design feature.