cPanel prior to 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).
cpanel cpanel