Possible (1 to 10%)

Every one of the 258 is a mark on the map. Named now: 1 to 26, most at risk first.

1. MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.CVE-1999-0490Microsoft · 9.9% likely

   Microsoft

2. PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.CVE-2000-0074Powerscripts · 9.8% likely

   Powerscripts

3. dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.CVE-1999-0913Network Security Wizards · 9.7% likely
4. The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.CVE-1999-04929.4% likely
5. A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.CVE-1999-0104Caldera · 9.3% likely

   Caldera

6. The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that th…CVE-2000-0160Microsoft · 9.2% likely

   Microsoft

7. The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.CVE-1999-0669Microsoft · 9.1% likely

   Microsoft

8. CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.CVE-1999-0985Cc · 8.9% likely
9. Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.CVE-2000-0017Redhat · 8.9% likely

   Red Hat

10. The Java Web Server would allow remote users to obtain the source code for CGI programs.CVE-1999-02838.9% likely
11. Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.CVE-1999-0750Microsoft · 8.7% likely

    Microsoft

12. Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.CVE-1999-0670Microsoft · 8.5% likely

    Microsoft

13. The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.CVE-2000-0109Comstock · 8.4% likely
14. The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.CVE-2000-0142Netopia · 8.0% likely

    Netopia

15. Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.CVE-2000-0133H. Nomura · 8.0% likely
16. IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.CVE-1999-0253Microsoft · 8.0% likely

    Microsoft

17. IIS has the #exec function enabled for Server Side Include (SSI) files.CVE-1999-05617.6% likely
18. The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.CVE-1999-0467Webcom · 7.5% likely

    Webcom

19. Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use t…CVE-1999-03477.5% likely
20. Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.CVE-2000-0046Mirabilis · 7.3% likely

    Mirabilis

21. Anonymous FTP is enabled.CVE-1999-04977.2% likely
22. Windows NT RSHSVC program allows remote users to execute arbitrary commands.CVE-1999-0249Microsoft · 7.2% likely

    Microsoft

23. Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.CVE-1999-0993Microsoft · 7.1% likely

    CWE-665Microsoft

24. IP forwarding is enabled on a machine which is not a router or firewall.CVE-1999-0511Microsoft · CVSS 9.1 · 7.0% likely

    CWE-200Microsoft

25. The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0136Mcmurtrey Whitaker And Associates · 6.8% likely

    Mcmurtrey Whitaker And Associates

26. Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.CVE-2000-0016True North · 6.7% likely

    True North

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.