Hello James,
Thank you for the report.
For own virtual host (port 8443) Parallels Plesk Panel uses custom built PHP engine that is patched properly but shows old version.
You may hide appropriate header through %plesk_dir%\admin\php.ini. You should switch off parameter expose_php = Off...