Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-05	CVE-2017-18469	Improper Input Validation vulnerability in Cpanel cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233). network low complexity cpanel CWE-20	6.5
2019-08-05	CVE-2016-10775	Improper Input Validation vulnerability in Cpanel cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173). network low complexity cpanel CWE-20	6.8
2019-08-05	CVE-2016-10773	Use of Externally-Controlled Format String vulnerability in Cpanel cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171). network low complexity cpanel CWE-134	6.5
2019-08-05	CVE-2016-10771	Improper Input Validation vulnerability in Cpanel cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165). network low complexity cpanel CWE-20	5.5
2019-08-05	CVE-2016-10770	Improper Input Validation vulnerability in Cpanel cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC-164). network low complexity cpanel CWE-20	5.5
2019-08-05	CVE-2016-10769	Open Redirect vulnerability in Cpanel cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162). network cpanel CWE-601	5.8
2019-08-05	CVE-2016-10768	Improper Input Validation vulnerability in Cpanel cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). network low complexity cpanel CWE-20	5.5
2019-08-05	CVE-2017-18468	Code Injection vulnerability in Cpanel cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232). network low complexity cpanel CWE-94	6.5
2019-08-05	CVE-2017-18467	7PK - Security Features vulnerability in Cpanel cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). network low complexity cpanel CWE-254	4.0
2019-08-05	CVE-2017-18466	Improper Input Validation vulnerability in Cpanel cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). network low complexity cpanel CWE-20	4.0