Likely to be exploited (10% or more)

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm…CVE-2000-0649Microsoft · 77% likely

   CWE-200Microsoft

2. Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser…CVE-2000-0653Microsoft · 27% likely

   Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.