Any system that stores passwords in hashed form is vulnerable to Pass-the-Hash Attacks. This includes Windows systems that use NTLM authentication.