Possible (1 to 10%)

Every one of the 94 is a mark on the map. Named now: 1 to 26, most at risk first.

1. userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-05273r Soft · 9.9% likely
2. Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.CVE-2000-0011Analogx · 9.4% likely

   Analogx

3. The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.CVE-2000-0503Microsoft · 9.3% likely

   Microsoft

4. Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table.CVE-2000-0612Microsoft · 8.6% likely

   Microsoft

5. Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.CVE-2000-0405Atstake · 8.4% likely
6. A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.CVE-2000-0350Networkice · 7.9% likely
7. A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.CVE-1999-0387Microsoft · 7.9% likely

   CWE-255Microsoft

8. Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.CVE-2000-0411Matt Wright · 7.8% likelycovered by CyberSIXT

   Matt Wright1 article

9. Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command.CVE-2000-0452Lotus · 7.7% likely

   Lotus

10. The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0432Matt Kruse · 7.7% likely
11. The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0424George Burgyan · 7.7% likely
12. Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the…CVE-2000-0331Microsoft · 7.5% likely

    Microsoft

13. BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.CVE-2000-0279Be · 7.3% likely
14. The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.CVE-2000-0262Avm · 7.3% likely

    Avm

15. ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.CVE-2000-0339Zonelabs · 7.3% likely

    Zonelabs

16. MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.CVE-2000-0436Metaproducts · 7.1% likely
17. MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.CVE-2000-0045Oracle · 7.0% likely

    Oracle

18. mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-05263r Soft · 7.0% likely
19. The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scri…CVE-2000-0396Pacific Software · 6.9% likely
20. Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unau…CVE-2000-0439Microsoft · 6.2% likely

    Microsoft

21. RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.CVE-2000-0001Realnetworks · 6.2% likely

    Realnetworks

22. Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.CVE-2000-0236Netscape · 5.9% likely

    Netscape

23. StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0174Sun · 5.9% likely

    Sun Microsystems

24. Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.CVE-2000-0437Network Associates · 5.9% likely

    Network Associates

25. Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.CVE-2000-0425Lsoft · 5.8% likely

    Lsoft

26. NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.CVE-2000-0416Microsoft · 5.7% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.