| CVE-2016-10835 | 中4.3 | cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107). | 01/08/2019 |
| CVE-2016-10834 | 高8.8 | cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105). | 01/08/2019 |
| CVE-2016-10833 | 高7.5 | cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104). | 01/08/2019 |
| CVE-2016-10832 | 中6.5 | cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102). | 01/08/2019 |
| CVE-2016-10831 | 高7.2 | cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101). | 01/08/2019 |
| CVE-2016-10830 | 高8.1 | cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100). | 01/08/2019 |
| CVE-2016-10829 | 中6.5 | cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). | 01/08/2019 |
| CVE-2016-10828 | 高8.8 | cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). | 01/08/2019 |
| CVE-2016-10827 | 中5.4 | cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). | 01/08/2019 |
| CVE-2016-10825 | 高8.1 | cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). | 01/08/2019 |
| CVE-2016-10824 | 緊急9.8 | cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). | 01/08/2019 |
| CVE-2016-10823 | 高8.8 | cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89). | 01/08/2019 |
| CVE-2016-10822 | 中5.4 | cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). | 01/08/2019 |
| CVE-2018-20935 | 中5.4 | cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412). | 01/08/2019 |
| CVE-2018-20934 | 中6.5 | cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411). | 01/08/2019 |
| CVE-2018-20933 | 中5.4 | cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). | 01/08/2019 |
| CVE-2018-20932 | 低2.7 | cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406). | 01/08/2019 |
| CVE-2018-20931 | 中6.3 | cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405). | 01/08/2019 |
| CVE-2018-20930 | 中6.5 | cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401). | 01/08/2019 |
| CVE-2018-20929 | 中6.1 | cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392). | 01/08/2019 |