Cpanel

Records429All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

Cpanel records in CISA KEV

TI-2026-30342 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 99KEV 2026-04-30

Components

Products in the NVD configurations · select one to filter the records

Cpanel 420 records CRITICAL Webhost Manager 5 records MEDIUM Whm 5 records CRITICAL Cgiecho 3 records LOW Cgiemail 3 records LOW Wp Squared 3 records CRITICAL

Records

5 records in Webhost Manager · all components

TI-2007-00831 CVE-2007-0854 · GHSA-64c8-jxwr-fxq6

Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM)…

MEDIUM 42

Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL in the obj parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0615 Published 2007-02-08 No fix listed CWE-94

TI-2012-05191 CVE-2012-6448 · GHSA-4cfj-fw6h-v7f4

Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote…

LOW 30

Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01534 Published 2020-01-27 No fix listed CWE-79

TI-2006-05962 CVE-2006-6198 · GHSA-j3hh-v5j4-grcf

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0…

LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail,…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01822 Published 2006-12-01 No fix listed

TI-2007-00866 CVE-2007-0890 · GHSA-22xp-6r98-2c4p

Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager…

LOW 24

Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01821 Published 2007-02-12 No fix listed

TI-2006-06293 CVE-2006-6548 · GHSA-6pwv-f4j6-84c2

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the domain parameter to (1) scripts2/changeemail, (2)…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00919 Published 2006-12-14 No fix listed

Open these records in search →

Critical	21
High	109
Medium	242
Low	57
No CVSS	0