CVE-2017-18410

In cPanel before 67.9999.103, a user account’s backup archive could contain all MySQL databases on the server (SEC-284).

Source: CVE-2017-18410