[Kieran]

You can see who owns them for sure by doing in the /tmp directory when logged in over SSH:-

ls -lh | grep "cpanel.TMP"

To see what they might contain and/or try and work out how they got there then you could download them to your hard drive and view them using a reputable and robust text editor (given the size) and see what they contain.