As far as I'm aware there is no way of 'hacking' the password. I know that you can clear the PLC (in other words set it back to factory settings) without the password but if you don't have a backup of the code then that isn't going to help you.
Can you not get in touch with the original programmer (or their company) some how to get the password. Ask around and find out when the last modification was done to the program and who did it. Then try and chase them down to get the password.
Also, try a few obvious ones like the company name etc.