cPanel suffers from cross domain scripting, user enumeration, and information disclosure vulnerabilities.