cPanel prior to 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).
cpanel cpanel