Zmodo DVRs and many others have been hacked. If your DVR is accessible from the Internet, your user names and passwords can be seen. I tried it on mine and it worked.

https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root