The bigger question is how Windows XP is used. If it is not linked to the internet what is the risk of intrusion?
If hacked using a personal media devices then all systems have that vulnerability.