This post from carnal0wnage explains how to extract the Real VNC passwords from the Windows Registry.

The password is DES encrypted, but  Real VNC is using a hardcoded key. No comments on that … :)