Likely to be exploited (10% or more)

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the…CVE-2000-0402Microsoft · 91% likely

   Microsoft

2. FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called b…CVE-2000-0574Openbsd · 59% likely

   Openbsd

3. IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extensio…CVE-2000-0408Microsoft · 58% likely

   Microsoft

4. Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragm…CVE-2000-0305Microsoft · 38% likely

   CWE-399Microsoft

5. The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.CVE-2000-0380Cisco · 35% likely

   CWE-20Cisco

6. Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program,…CVE-2000-0304Microsoft · 29% likely

   Microsoft

7. The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, a…CVE-2000-0419Microsoft · 21% likely

   Microsoft

8. Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "F…CVE-2000-0465Microsoft · 21% likely

   Microsoft

9. Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerabili…CVE-2000-0168Microsoft · 20% likely

   Microsoft

10. The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka…CVE-2000-0377Microsoft · 19% likely

    Microsoft

11. The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerab…CVE-2000-0404Microsoft · 18% likely

    Microsoft

12. The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master bro…CVE-2000-0403Microsoft · 18% likely

    Microsoft

13. Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUER…CVE-2000-0491Gnome · 18% likely

    Gnome

14. Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.CVE-2000-0544Microsoft · 18% likely

    Microsoft

15. Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.CVE-2000-0389Mit · 17% likely

    Mit

16. Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases…CVE-2000-0580Microsoft · 16% likely

    Microsoft

17. Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.CVE-2000-0524Microsoft · 15% likely

    Microsoft

18. Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component…CVE-2000-0464Microsoft · 13% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.