I heard that RDC has a vulnerability in it, some small GSP by the name of nexgaming (rent servers from UK Online iirc) had their windows box hacked due to the vulnerability and had to replace the service with Real VNC
Here's a link of the some what interesting thread:
http://www.nexgaming.co.uk/forum/viewtopic.php?t=73