Cpanel Webhost Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Cpanel Webhost Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2007-0854 — CVSS 7.5 (high): Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code…
• CVE-2012-6448 — CVSS 6.1 (medium): Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-6198 — CVSS 6.0 (medium): Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject…
• CVE-2007-0890 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers…
• CVE-2006-6548 — CVSS 3.5 (low): Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject…