Possible (1 to 10%)

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or lo…CVE-2000-0775Robtex · 9.7% likely
2. Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by dire…CVE-2000-0689Cgi Script Center · 7.8% likely

   Cgi Script Center

3. Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directl…CVE-2000-0688Cgi Script Center · 7.8% likely

   Cgi Script Center

4. The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers…CVE-2000-0696Sun · 7.2% likely

   Sun Microsystems

5. Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.CVE-2000-0756Microsoft · 5.1% likely

   Microsoft

6. Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /O…CVE-2000-0713Adobe · 4.9% likely

   Adobe

7. The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the comman…CVE-2000-0757Aptis Software · 4.1% likely

   Aptis Software

8. The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary file…CVE-2000-0798Sgi · 3.2% likely

   Sgi

9. String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges.CVE-2000-0800Suse · 3.2% likely

   SUSE

10. sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.CVE-2000-0784Rapidstream · 3.1% likely
11. eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.CVE-2000-0734Eeye Digital Security · 2.5% likely
12. Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.CVE-2000-0687Cgi Script Center · 2.5% likely

    Cgi Script Center

13. Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system.CVE-2000-0793Novell · 2.0% likely

    Novell

14. Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards…CVE-2000-0736Rimarts Inc. · 1.9% likely

    Rimarts Inc.

15. Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies…CVE-2000-0735Rimarts Inc. · 1.9% likely

    Rimarts Inc.

16. The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.CVE-2000-0774Bajie · 1.5% likely

    Bajie

17. Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.CVE-2000-0686Cgi Script Center · 1.4% likely

    Cgi Script Center

18. ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.CVE-2000-0692Iss · 1.4% likely

    Iss

19. The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.CVE-2000-0772Tumbleweed · 1.4% likely

    Tumbleweed

20. O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directl…CVE-2000-0769Oreilly · 1.4% likely

    Oreilly

21. The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan…CVE-2000-0680Cvs · 1.3% likely

    Cvs

22. WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file.CVE-2000-0785Wircsrv · 1.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.