It appears that there is a remote compromise vulnerability in cPanel in relation to reseller accounts.