Possible (1 to 10%)

Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.CVE-2000-0213Sambar · 10.0% likely

   Sambar

2. DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0177Dnstools Software · 9.9% likely
3. EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.CVE-2000-0187Alex Heiphetz Group · 8.5% likely
4. Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.CVE-2000-0198Atrium Software · 8.4% likely

   Atrium Software

5. Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.CVE-1999-0996Infoseek · 7.7% likely
6. The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM F…CVE-2000-0162Microsoft · 7.6% likely

   Microsoft

7. Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.CVE-2000-0149Zeus Technologies · 7.4% likely

   Zeus Technologies

8. The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.CVE-2000-0204Trend Micro · 7.4% likely

   Trend Micro

9. Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.CVE-1999-0931Mediahouse Software · 7.0% likely
10. AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.CVE-2000-0039Altavista · 5.9% likely
11. A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.CVE-1999-0746Suse · 5.6% likely

    SUSE

12. Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.CVE-2000-0152Novell · 5.5% likely

    Novell

13. Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail…CVE-2000-0216Microsoft · 5.1% likely

    Microsoft

14. MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.CVE-2000-0148Oracle · 4.7% likely

    Oracle

15. The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka t…CVE-2000-0121Microsoft · 4.7% likely

    Microsoft

16. Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.CVE-2000-0026Sco · 4.6% likely

    Sco

17. Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.CVE-2000-0036Microsoft · 3.9% likely

    Microsoft

18. Buffer overflow in AIX ftpd in the libc library.CVE-1999-0789Ibm · 3.1% likely

    IBM

19. EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.CVE-2000-0188Alex Heiphetz Group · 3.0% likely
20. The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it,…CVE-2000-0089Microsoft · 2.3% likely

    Microsoft

21. Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.CVE-1999-0908Sun · 2.2% likely

    Sun Microsystems

22. Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid…CVE-2000-0150Checkpoint · 2.2% likely

    Check Point

23. The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not…CVE-2000-0176Cat Soft · 2.1% likely
24. Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.CVE-1999-0740Redhat · 2.1% likely

    Red Hat

25. The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.CVE-1999-1000Cisco · 2.0% likely

    Cisco

26. Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerabi…CVE-2000-0088Microsoft · 1.9% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.