Cpanel

CVEs (427)

• CVE-2016-10780MedAug 6, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).

• CVE-2016-10779MedAug 6, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).

• CVE-2016-10778MedAug 6, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).

• CVE-2016-10777MedAug 6, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).

• CVE-2016-10776MedAug 6, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).

• CVE-2017-18481MedAug 5, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).

• CVE-2017-18473MedAug 5, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).

• CVE-2017-18471MedAug 5, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).

• CVE-2016-10774MedAug 5, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172).

• CVE-2016-10767MedAug 5, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).

• CVE-2017-18454MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).

• CVE-2017-18451MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.3epss 0.01

  cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).

• CVE-2017-18448MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.3epss 0.01

  cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).

• CVE-2017-18444MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.3epss 0.01

  cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).

• CVE-2017-18442MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.3epss 0.01

  cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).

• CVE-2017-18420MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).

• CVE-2017-18419MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).

• CVE-2017-18418MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).

• CVE-2017-18417MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).

• CVE-2017-18408MedAug 2, 2019
  CPanel

  Cpanel
  risk 0.35cvss 5.4epss 0.01

  cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).