cPanel prior to 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).
cpanel cpanel