Likely to be exploited (10% or more)

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.CVE-2000-0098Microsoft · 49% likely

   Microsoft

2. The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.CVE-2000-0097Microsoft · 36% likely

   Microsoft

3. IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh,…CVE-2000-0025Microsoft · 35% likely

   Microsoft

4. Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.CVE-1999-0920University Of Washington · 32% likely

   University Of Washington

5. A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.CVE-1999-0678Apache · 31% likely

   Apache

6. Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.CVE-2000-0156Microsoft · 13% likely

   Microsoft

7. Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.CVE-1999-0896Realnetworks · 13% likely

   Realnetworks

8. Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.CVE-2000-0161Microsoft · 10% likely

   Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.