CVE-2002-1575 in cPanel
Summary
cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
If you want to get best quality of vulnerability data, you may have to visit VulDB.