In cPanel prior to 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75).
cpanel cpanel