ZPanel 10.0.1 has insufficient entropy for its password reset process.
ZPanel
Exploit
CVE-2012-5686
NVD
Refer to CVE-2012-5686 NVD advisory