cPanel prior to 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).
cpanel cpanel