Possible (1 to 10%)

Every one of the 115 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.CVE-1999-0951Omnicron · 10.0% likely

   Omnicron

2. classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.CVE-1999-09359.8% likely
3. Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.CVE-1999-0879Bsdi · 9.7% likely

   Bsdi

4. WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.CVE-1999-0953Matt Wright · 8.6% likely

   Matt Wright

5. An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.CVE-1999-0726Microsoft · 8.5% likely

   CWE-20Microsoft

6. Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.CVE-1999-0721Microsoft · 8.5% likely

   CWE-20Microsoft

7. Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.CVE-1999-0101Ibm · 8.4% likely

   IBM

8. Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.CVE-1999-0749Microsoft · 8.0% likely

   Microsoft

9. The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.CVE-1999-0723Microsoft · 7.3% likely

   Microsoft

10. The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.CVE-1999-0766Microsoft · 7.2% likely

    CWE-16Microsoft

11. Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.CVE-1999-0994Microsoft · 7.1% likely

    CWE-255Microsoft

12. Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.CVE-1999-0967Microsoft · 6.9% likely

    Microsoft

13. classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.CVE-1999-09346.8% likely
14. Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.CVE-1999-0898Microsoft · 6.7% likely

    CWE-119Microsoft

15. Denial of service in BIND named via consuming more than "fdmax" file descriptors.CVE-1999-0848Isc · 6.4% likely

    Isc

16. The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.CVE-1999-0771Compaq · 6.2% likely

    Compaq

17. The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.CVE-1999-0917Microsoft · 6.2% likely

    Microsoft

18. Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.CVE-1999-0275Microsoft · 6.0% likely

    Microsoft

19. A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.CVE-1999-0717Microsoft · 5.8% likely

    Microsoft

20. A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.CVE-1999-0728Microsoft · 5.8% likely

    CWE-264Microsoft

21. TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-0933Teamshare · 5.8% likely
22. FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-0887Floosietek · 5.8% likely

    Floosietek

23. Buffer overflow in Internet Explorer 4.0 via EMBED tag.CVE-1999-0876Microsoft · 5.7% likely

    CWE-119Microsoft

24. Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.CVE-1999-0680Microsoft · 5.7% likely

    CWE-287Microsoft

25. Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.CVE-1999-0804Linux · 5.6% likely

    Linux

26. The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.CVE-1999-0753Hughes · 5.3% likely

    Hughes

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.