Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote malicious users to inject arbitrary web script or HTML via the numdays parameter.
cpanel cpanel -