We issued security hotfix Parallels Plesk Panel 10.0.1 MU#2 – Plesk admin password changing.
The Micro-Update delivers bug fix for vulnerability that allows authorized Plesk user to change Plesk ‘admin’ password and then compromise Control Panel.