Panel fixed three flaws, including one that lets any logged-in cPanel account run code as root and another that can modify other accounts' databases.