Possible (1 to 10%)

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.CVE-2000-0444Hp · 8.2% likely

   HP

2. Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.CVE-2000-0423Netwin · 7.8% likely

   Netwin

3. A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" v…CVE-2000-0329Microsoft · 7.7% likely

   Microsoft

4. Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.CVE-1999-0842Symantec · 7.5% likely

   Symantec

5. The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a…CVE-2000-0400Microsoft · 7.3% likely

   CWE-20Microsoft

6. The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.CVE-2000-0234Sun · 7.3% likely

   Sun Microsystems

7. IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overfl…CVE-2000-0226Microsoft · 6.8% likely

   Microsoft

8. Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.CVE-1999-0210Sun · 6.2% likely

   Sun Microsystems

9. Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.CVE-2000-0415Microsoft · 6.0% likely

   Microsoft

10. NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remot…CVE-2000-0384Intel · 5.9% likely

    Intel

11. The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.CVE-2000-0323Microsoft · 5.5% likely

    Microsoft

12. By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.CVE-1999-0407Microsoft · 5.1% likely

    Microsoft

13. SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.CVE-2000-0233Suse · 4.6% likely

    SUSE

14. rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other b…CVE-1999-0493Sun · 4.3% likely

    Sun Microsystems

15. Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.CVE-1999-0832Redhat · 3.5% likely

    Red Hat

16. Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.CVE-2000-0232Microsoft · 3.5% likely

    Microsoft

17. A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.CVE-2000-0429Mcmurtrey Whitaker And Associates · 3.2% likely

    Mcmurtrey Whitaker And Associates

18. UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.CVE-1999-0836Sco · 3.1% likely

    Sco

19. The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifyin…CVE-2000-0412Napster · 2.7% likely
20. The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.CVE-1999-0754Isc · 2.7% likely

    Isc

21. The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network…CVE-2000-0113Sybergen · 2.5% likely
22. Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.CVE-1999-0838Deerfield · 2.5% likely

    Deerfield

23. Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.CVE-2000-0401Pdgsoft · 2.4% likely
24. Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.CVE-2000-0449Omnis · 2.2% likely
25. Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.CVE-2000-0422Netwin · 2.0% likely

    Netwin

26. Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.CVE-2000-0450Sean Macguire · 2.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.