I use 1and1 hosting and gave my friend an FTP where he can upload and try out things in his folder. I want him to be able to create and use a MySQL Database, but I don't wanna give him access to my entire control panel.

what do I do?

Why don't you just create the DB then give him the name usename and password.

Other than that suggestion you may need to ask the support group at your host since they use a non-standard controlpanel.

MySQL you can do that via cpanel but if ur mate wants to make a forum of some kind then he will need your login and password... your worry is can he be trusted? only you know that

Depending on the permissions 1and1 gives their users, you might be able to install a limited version of PhpMyAdmin.