Cpanel

Records429All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

Cpanel records in CISA KEV

TI-2026-30342 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 99KEV 2026-04-30

Components

Products in the NVD configurations · select one to filter the records

Cpanel 420 records CRITICAL Webhost Manager 5 records MEDIUM Whm 5 records CRITICAL Cgiecho 3 records LOW Cgiemail 3 records LOW Wp Squared 3 records CRITICAL

Records

3 records in Cgiemail · all components

TI-2017-03615 CVE-2017-5613 · GHSA-gh36-xvm9-3hm2

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute…

LOW 39

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0256 Published 2017-03-03 No fix listed CWE-134

TI-2017-03618 CVE-2017-5616 · GHSA-253q-85fr-vjfv

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers…

LOW 30

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01168 Published 2017-03-03 No fix listed CWE-79

TI-2017-03617 CVE-2017-5615 · GHSA-r88j-2w5r-2c6x

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

LOW 30

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01136 Published 2017-03-03 No fix listed CWE-601

Open these records in search →

Critical	21
High	109
Medium	242
Low	57
No CVSS	0