SQL Slammer hit a lot of stuff behind the firewall.  All it took was one exposed MSDE machine inside the network and it sprawled across the SQL Servers within the network.  I know SQL Slammer happened a long time ago but the principle still applies