phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters https://nvd.nist.gov/vuln/detail/CVE-2017-1000015