Do better than I did, give them little money and take your time before you expect them to be the right company.
1: Just replied in a different thread, incident is fresh: https://news.ycombinator.com/item?id=7557887
Here's a list of CVEs for cPanel from 2010 back: http://www.cvedetails.com/vulnerability-list/vendor_id-1766/...
andalso: http://www.exploit-db.com/search/?action=search&filter_page=...
I dunno why those lists both stop at around 2010. cPanel is still being actively compromised: http://www.webhostingtalk.com/showthread.php?t=1267400
There's a fair chance that cPanel is the hole that regularly gives heartburn to some providers, like GoDaddy. For example, http://blog.sucuri.net/2011/09/godaddy-shared-servers-compro...
cPanel is popular, and it solves a lot of problems for a lot of people. Because it's so common, people who don't otherwise know their way around web hosting can feel right at home when using cPanel. I don't have some kind of irrational, hipster-esque or elitist hatred for it; I simply think that I can't in good conscience install it and knowingly put my hosting customers at risk.
But sure, for the most savvy of devs and ops people, cPanel hosts may not be the right setup.