# Vulnerabilities published in 2017


- [CVE-2017-18479](https://insights.sbomify.com/CVE-2017-18479/): Weak cryptography in cpanel:cpanel (medium 6.5)
- [CVE-2017-18478](https://insights.sbomify.com/CVE-2017-18478/): Missing authorization in cpanel:cpanel (medium 6.5)
- [CVE-2017-18477](https://insights.sbomify.com/CVE-2017-18477/): Privilege escalation in cpanel:cpanel (medium 6.5)
- [CVE-2017-18476](https://insights.sbomify.com/CVE-2017-18476/): Security feature bypass in cpanel:cpanel (high 7.5)
- [CVE-2017-18475](https://insights.sbomify.com/CVE-2017-18475/): Privilege escalation in cpanel:cpanel (high 8.8)
- [CVE-2017-18474](https://insights.sbomify.com/CVE-2017-18474/): Information disclosure in cpanel:cpanel (medium 6.5)
- [CVE-2017-18473](https://insights.sbomify.com/CVE-2017-18473/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18472](https://insights.sbomify.com/CVE-2017-18472/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2017-18471](https://insights.sbomify.com/CVE-2017-18471/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18470](https://insights.sbomify.com/CVE-2017-18470/): Hardcoded credentials in cpanel:cpanel (high 8.8)
- [CVE-2017-18469](https://insights.sbomify.com/CVE-2017-18469/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18468](https://insights.sbomify.com/CVE-2017-18468/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18467](https://insights.sbomify.com/CVE-2017-18467/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2017-18466](https://insights.sbomify.com/CVE-2017-18466/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18465](https://insights.sbomify.com/CVE-2017-18465/): Other in cpanel:cpanel (medium 4.4)
- [CVE-2017-18464](https://insights.sbomify.com/CVE-2017-18464/): Path traversal in cpanel:cpanel (medium 4.9)
- [CVE-2017-18463](https://insights.sbomify.com/CVE-2017-18463/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18462](https://insights.sbomify.com/CVE-2017-18462/): Security feature bypass in cpanel:cpanel (high 7.5)
- [CVE-2017-18461](https://insights.sbomify.com/CVE-2017-18461/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2017-18460](https://insights.sbomify.com/CVE-2017-18460/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18459](https://insights.sbomify.com/CVE-2017-18459/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18458](https://insights.sbomify.com/CVE-2017-18458/): Other in cpanel:cpanel (low 3.3)
- [CVE-2017-18457](https://insights.sbomify.com/CVE-2017-18457/): Path traversal in cpanel:cpanel (medium 4.4)
- [CVE-2017-18456](https://insights.sbomify.com/CVE-2017-18456/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2017-18455](https://insights.sbomify.com/CVE-2017-18455/): Missing authorization in cpanel:cpanel (low 2.7)
- [CVE-2017-18454](https://insights.sbomify.com/CVE-2017-18454/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18453](https://insights.sbomify.com/CVE-2017-18453/): Other in cpanel:cpanel (medium 4.9)
- [CVE-2017-18452](https://insights.sbomify.com/CVE-2017-18452/): Code injection in cpanel:cpanel (medium 6.7)
- [CVE-2017-18451](https://insights.sbomify.com/CVE-2017-18451/): Race condition in cpanel:cpanel (medium 5.3)
- [CVE-2017-18450](https://insights.sbomify.com/CVE-2017-18450/): Privilege escalation in cpanel:cpanel (medium 4.5)
- [CVE-2017-18449](https://insights.sbomify.com/CVE-2017-18449/): Privilege escalation in cpanel:cpanel (medium 5.5)
- [CVE-2017-18448](https://insights.sbomify.com/CVE-2017-18448/): Path traversal in cpanel:cpanel (medium 5.3)
- [CVE-2017-18447](https://insights.sbomify.com/CVE-2017-18447/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18446](https://insights.sbomify.com/CVE-2017-18446/): Memory corruption in cpanel:cpanel (medium 6.3)
- [CVE-2017-18445](https://insights.sbomify.com/CVE-2017-18445/): Security feature bypass in cpanel:cpanel (medium 4.3)
- [CVE-2017-18444](https://insights.sbomify.com/CVE-2017-18444/): Missing authorization in cpanel:cpanel (medium 5.3)
- [CVE-2017-18443](https://insights.sbomify.com/CVE-2017-18443/): Security feature bypass in cpanel:cpanel (medium 5.8)
- [CVE-2017-18442](https://insights.sbomify.com/CVE-2017-18442/): Missing authorization in cpanel:cpanel (medium 5.3)
- [CVE-2017-18441](https://insights.sbomify.com/CVE-2017-18441/): Open redirect in cpanel:cpanel (medium 5.0)
- [CVE-2017-18440](https://insights.sbomify.com/CVE-2017-18440/): Missing authorization in cpanel:cpanel (medium 4.3)
- [CVE-2017-18439](https://insights.sbomify.com/CVE-2017-18439/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18438](https://insights.sbomify.com/CVE-2017-18438/): XML external entity in cpanel:cpanel (medium 6.3)
- [CVE-2017-18437](https://insights.sbomify.com/CVE-2017-18437/): Code injection in cpanel:cpanel (medium 4.4)
- [CVE-2017-18436](https://insights.sbomify.com/CVE-2017-18436/): Information disclosure in cpanel:cpanel (low 3.5)
- [CVE-2017-18435](https://insights.sbomify.com/CVE-2017-18435/): File upload in cpanel:cpanel (high 7.3)
- [CVE-2017-18434](https://insights.sbomify.com/CVE-2017-18434/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18433](https://insights.sbomify.com/CVE-2017-18433/): Code injection in cpanel:cpanel (high 8.8)
- [CVE-2017-18432](https://insights.sbomify.com/CVE-2017-18432/): Information disclosure in cpanel:cpanel (high 7.8)
- [CVE-2017-18431](https://insights.sbomify.com/CVE-2017-18431/): Other in cpanel:cpanel (high 7.5)
- [CVE-2017-18430](https://insights.sbomify.com/CVE-2017-18430/): Other in cpanel:cpanel (medium 4.7)
- [CVE-2017-18429](https://insights.sbomify.com/CVE-2017-18429/): Information disclosure in cpanel:cpanel (low 3.3)
- [CVE-2017-18428](https://insights.sbomify.com/CVE-2017-18428/): Information disclosure in cpanel:cpanel (low 2.5)
- [CVE-2017-18427](https://insights.sbomify.com/CVE-2017-18427/): Misconfiguration in cpanel:cpanel (low 3.3)
- [CVE-2017-18426](https://insights.sbomify.com/CVE-2017-18426/): Information disclosure in cpanel:cpanel (low 2.7)
- [CVE-2017-18425](https://insights.sbomify.com/CVE-2017-18425/): Misconfiguration in cpanel:cpanel (low 2.5)
- [CVE-2017-18424](https://insights.sbomify.com/CVE-2017-18424/): Information disclosure in cpanel:cpanel (low 3.3)
- [CVE-2017-18423](https://insights.sbomify.com/CVE-2017-18423/): Information disclosure in cpanel:cpanel (low 3.3)
- [CVE-2017-18422](https://insights.sbomify.com/CVE-2017-18422/): Misconfiguration in cpanel:cpanel (low 3.3)
- [CVE-2017-18421](https://insights.sbomify.com/CVE-2017-18421/): Missing authorization in cpanel:cpanel (low 3.3)
- [CVE-2017-18420](https://insights.sbomify.com/CVE-2017-18420/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18419](https://insights.sbomify.com/CVE-2017-18419/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18418](https://insights.sbomify.com/CVE-2017-18418/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18417](https://insights.sbomify.com/CVE-2017-18417/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18416](https://insights.sbomify.com/CVE-2017-18416/): Other in cpanel:cpanel (medium 5.5)
- [CVE-2017-18415](https://insights.sbomify.com/CVE-2017-18415/): Code injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18414](https://insights.sbomify.com/CVE-2017-18414/): Open redirect in cpanel:cpanel (high 7.4)
- [CVE-2017-18413](https://insights.sbomify.com/CVE-2017-18413/): Other in cpanel:cpanel (high 7.8)
- [CVE-2017-18412](https://insights.sbomify.com/CVE-2017-18412/): Information disclosure in cpanel:cpanel (low 2.5)
- [CVE-2017-18411](https://insights.sbomify.com/CVE-2017-18411/): Information disclosure in cpanel:cpanel (medium 6.8)
- [CVE-2017-18410](https://insights.sbomify.com/CVE-2017-18410/): Information disclosure in cpanel:cpanel (medium 6.5)
- [CVE-2017-18409](https://insights.sbomify.com/CVE-2017-18409/): Information disclosure in cpanel:cpanel (medium 6.5)
- [CVE-2017-18408](https://insights.sbomify.com/CVE-2017-18408/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18407](https://insights.sbomify.com/CVE-2017-18407/): Security feature bypass in cpanel:cpanel (medium 4.8)
- [CVE-2017-18406](https://insights.sbomify.com/CVE-2017-18406/): SQL injection in cpanel:cpanel (high 7.5)
- [CVE-2017-18405](https://insights.sbomify.com/CVE-2017-18405/): Path traversal in cpanel:cpanel (medium 5.5)
- [CVE-2017-18404](https://insights.sbomify.com/CVE-2017-18404/): Missing authorization in cpanel:cpanel (low 3.1)
- [CVE-2017-18403](https://insights.sbomify.com/CVE-2017-18403/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18402](https://insights.sbomify.com/CVE-2017-18402/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18401](https://insights.sbomify.com/CVE-2017-18401/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18400](https://insights.sbomify.com/CVE-2017-18400/): Command injection in cpanel:cpanel (high 7.8)
- [CVE-2017-18399](https://insights.sbomify.com/CVE-2017-18399/): Race condition in cpanel:cpanel (low 3.7)
- [CVE-2017-18398](https://insights.sbomify.com/CVE-2017-18398/): Other in cpanel:cpanel (low 3.8)
- [CVE-2017-18397](https://insights.sbomify.com/CVE-2017-18397/): Misconfiguration in cpanel:cpanel (low 3.3)
- [CVE-2017-18396](https://insights.sbomify.com/CVE-2017-18396/): Information disclosure in cpanel:cpanel (medium 5.5)
- [CVE-2017-18395](https://insights.sbomify.com/CVE-2017-18395/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18394](https://insights.sbomify.com/CVE-2017-18394/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18393](https://insights.sbomify.com/CVE-2017-18393/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18392](https://insights.sbomify.com/CVE-2017-18392/): Business logic in cpanel:cpanel (low 2.0)
- [CVE-2017-18391](https://insights.sbomify.com/CVE-2017-18391/): Information disclosure in cpanel:cpanel (low 2.5)
- [CVE-2017-18390](https://insights.sbomify.com/CVE-2017-18390/): Misconfiguration in cpanel:cpanel (high 7.8)
- [CVE-2017-18389](https://insights.sbomify.com/CVE-2017-18389/): Code injection in cpanel:cpanel (medium 6.3)
- [CVE-2017-18388](https://insights.sbomify.com/CVE-2017-18388/): Other in cpanel:cpanel (high 7.8)
- [CVE-2017-18387](https://insights.sbomify.com/CVE-2017-18387/): Code injection in cpanel:cpanel (high 7.2)
- [CVE-2017-18386](https://insights.sbomify.com/CVE-2017-18386/): Code injection in cpanel:cpanel (high 7.2)
- [CVE-2017-18385](https://insights.sbomify.com/CVE-2017-18385/): Missing authorization in cpanel:cpanel (medium 5.5)
- [CVE-2017-18384](https://insights.sbomify.com/CVE-2017-18384/): Security feature bypass in cpanel:cpanel (low 3.8)
- [CVE-2017-18383](https://insights.sbomify.com/CVE-2017-18383/): Information disclosure in cpanel:cpanel (high 7.8)
- [CVE-2017-18382](https://insights.sbomify.com/CVE-2017-18382/): Other in cpanel:cpanel (low 2.7)
- [CVE-2017-18381](https://insights.sbomify.com/CVE-2017-18381/): Misconfiguration in edx:edx-platform (high 7.2)
- [CVE-2017-18380](https://insights.sbomify.com/CVE-2017-18380/): Business logic in edx:edx-platform (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/68/