As i reported here: http://forums.cpanel.net/showthread.php?s=&threadid=7625 Cpanel is still deploying 2.0.2 which allows anyone to get admin access rights to phpbb 2.02. We had this happen to two boards on our servers which were trashed by someone dialing in from Indonesia and China. Disable the option so nobody can install it and post a msg to your users to upgrade. I should have written about this earlier but i forgot. The lastest version is 2.0.4 which is two versions ahead of what is currently being installed by Cpanel.