phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server https://nvd.nist.gov/vuln/detail/CVE-2017-1000017