CVE-2008-7142: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the Disk Usage module frontend/x/diskusage/index.html in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to a editquota.html or b dodelpop.html; 2 showtree parameter to c diskusage.html; or the 3 mon, 4 year, 5 target, or 6 domain parameter ...

CVE-2006-0573

Multiple cross-site scripting XSS vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to a editquota.html or b dodelpop.html; 2 showtree parameter to c diskusage.html; or the 3 mon, 4 year, 5 target, or 6 domain parameter ...