Are there any default accounts (local / domain operating system) associated with exchange 2003, and perhaps default passwords that we should check arent in operation in our infrastructure?

Whatever account installed Exchange into the forest will have full Exchange Admin Rights. Otherwise, thats about it.