A vulnerability in the cPanel/WHM admin interface lets attackers access websites without a username and password.