Likely to be exploited (10% or more)

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.CVE-1999-0891Microsoft · 42% likely

   CWE-94Microsoft

2. Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to…CVE-1999-0270Sgi · 32% likely

   Sgi

3. Denial of service in various Windows systems via malformed, fragmented IGMP packets.CVE-1999-0918Microsoft · 26% likely

   CWE-20Microsoft

4. Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.CVE-1999-0682Microsoft · 26% likely

   Microsoft

5. When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".CVE-1999-0725Microsoft · 25% likely

   CWE-16Microsoft

6. Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.CVE-1999-0702Microsoft · 24% likely

   CWE-94Microsoft

7. Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request.CVE-1999-0980Microsoft · 23% likely

   Microsoft

8. Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "M…CVE-1999-0995Microsoft · 22% likely

   CWE-20Microsoft

9. Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.CVE-1999-0999Microsoft · 22% likely

   CWE-20Microsoft

10. The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.CVE-1999-0886Microsoft · 22% likely

    CWE-16Microsoft

11. Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.CVE-1999-0867Microsoft · 22% likely

    CWE-20Microsoft

12. Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.CVE-1999-0877Microsoft · 18% likely

    CWE-200Microsoft

13. Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.CVE-1999-0869Microsoft · 17% likely

    Microsoft

14. IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.CVE-1999-0233Microsoft · 16% likely

    Microsoft

15. Remote command execution in Microsoft Internet Explorer using .lnk and .url files.CVE-1999-0280Microsoft · 16% likely

    Microsoft

16. Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.CVE-1999-0755Microsoft · 15% likely

    CWE-255Microsoft

17. Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.CVE-1999-0858Microsoft · 14% likely

    CWE-16Microsoft

18. The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed h…CVE-1999-0969Microsoft · 13% likely

    Microsoft

19. Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.CVE-1999-0793Microsoft · 13% likely

    Microsoft

20. Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Ser…CVE-1999-0981Microsoft · 13% likely

    CWE-59Microsoft

21. Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.CVE-1999-0870Microsoft · 13% likely

    Microsoft

22. Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.CVE-1999-0977Sun · 13% likely

    Sun Microsystems

23. Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.CVE-1999-0871Microsoft · 12% likely

    Microsoft

24. Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.CVE-1999-0909Microsoft · 12% likely

    CWE-264Microsoft

25. IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-0777Microsoft · 12% likely

    CWE-264Microsoft

26. Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.CVE-1999-0989Microsoft · 12% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.