CVE-2017-18382

cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...

CVE-2017-18385

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

CVE-2017-18389

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...

CVE-2017-18388

cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...

CVE-2017-18386

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin SEC-313...

CVE-2017-18387

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

CVE-2017-18390

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...

CVE-2017-18384

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

CVE-2017-18387

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

CVE-2017-18386

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin SEC-313...

Design/Logic Flaw

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

Design/Logic Flaw

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

Design/Logic Flaw

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

Code injection

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...

Design/Logic Flaw

cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...

Design/Logic Flaw

cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...

Sql injection

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

Format string

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...

Sql injection

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin SEC-313...

Code injection

cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...