Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Cpanel CpanelInput Validation

Risk 38
Severity
6.5
Input Validation
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cPanel before 62.0.4 allows resellers to use the WHM enqueuetransferitem API for queueing non-rearrange modules (SEC-213).

First published (updated )
CVE-2017-18482

Cpanel CpanelXSS

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).

First published (updated )
CVE-2017-18481

Cpanel CpanelInfoleak

Risk 38
Severity
6.8
Infoleak
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).

First published (updated )
CVE-2017-18474

Cpanel CpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).

Risk 38
Severity
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).

First published (updated )
CVE-2017-18479

Cpanel CpanelLeech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).

Risk 43
Severity
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).

First published (updated )
CVE-2017-18476

Cpanel CpanelXSS

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).

First published (updated )
CVE-2017-18473

Cpanel CpanelXSS

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen (SEC-197).

First published (updated )
CVE-2017-18471

Cpanel CpanelInfoleak

Risk 38
Severity
6.5
Infoleak
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207).

First published (updated )
CVE-2017-18478

Cpanel CpanelcPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

First published (updated )
CVE-2017-18470

Cpanel CpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-…

Risk 38
Severity
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cPanel before 62.0.4 does not enforce account ownership for hasmycnfforcpuser WHM API calls (SEC-210).

First published (updated )
CVE-2017-18480

Cpanel CpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206…

Risk 38
Severity
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).

First published (updated )
CVE-2017-18477

Cpanel CpanelInput Validation

Risk 79
Severity
8.8
Input Validation
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204).

First published (updated )
CVE-2017-18475

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203