Likely to be exploited (10% or more)

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP…CVE-2000-0246Microsoft · 80% likely

   Microsoft

2. The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute…CVE-1999-1011Microsoft · 77% likely

   CWE-264Microsoft

3. Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.CVE-1999-0874Microsoft · 75% likely

   CWE-119Microsoft

4. The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requestin…CVE-2000-0413Microsoft · 44% likely

   Microsoft

5. Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.CVE-2000-0169Oracle · 27% likely

   Oracle

6. Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.CVE-2000-0328Microsoft · 25% likely

   Microsoft

7. The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubb…CVE-1999-0668Microsoft · 23% likely

   Microsoft

8. IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerabil…CVE-2000-0258Microsoft · 19% likely

   CWE-20Microsoft

9. Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.CVE-1999-0225Microsoft · 18% likely

   Microsoft

10. JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.CVE-1999-0031Microsoft · 18% likely

    Microsoft

11. The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.CVE-2000-0330Microsoft · 15% likely

    Microsoft

12. NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.CVE-1999-0819Microsoft · 15% likely

    Microsoft

13. Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vul…CVE-2000-0260Microsoft · 14% likely

    Microsoft

14. Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Med…CVE-2000-0228Microsoft · 14% likely

    Microsoft

15. Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).CVE-1999-0696Sun · 12% likely

    Sun Microsystems

16. Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine…CVE-2000-0327Microsoft · 12% likely

    Microsoft

17. Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.CVE-2000-0245Sgi · 12% likely

    Sgi

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.