Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2004-10-18	CVE-2004-1603	Link Following vulnerability in Cpanel 9.4.1 cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled. local low complexity cpanel CWE-59	5.5
2004-09-30	CVE-2004-1604	Remote Security vulnerability in Cpanel 9.9.1R3 cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled. network low complexity cpanel	5.0
2004-03-24	CVE-2004-1849	Cross-Site Scripting vulnerability in Cpanel 9.1 Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html. network cpanel	4.3
2003-08-18	CVE-2003-0521	Cross-Site Scripting vulnerability in cPanel Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens. network cpanel	6.8