Likely to be exploited (10% or more)

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerabi…CVE-2000-0778Microsoft · 87% likely

   Microsoft

2. IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.CVE-2000-0630Microsoft · 68% likely

   Microsoft

3. GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.CVE-2000-0665Gamsoft · 51% likely
4. Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.CVE-2000-0681Bea · 51% likely

   Bea

5. The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.CVE-2000-0505Apache · 47% likely

   Apache

6. The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.CVE-2000-0322Redhat · 42% likely

   Red Hat

7. Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's sy…CVE-2000-0711Netscape · 34% likely

   Netscape

8. The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Rele…CVE-2000-0673Microsoft · 33% likely

   Microsoft

9. Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.CVE-2000-0495Microsoft · 32% likely

   Microsoft

10. Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail…CVE-2000-0567Microsoft · 32% likely

    Microsoft

11. rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.CVE-2000-0666Conectiva · 26% likely

    Conectiva

12. Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow rem…CVE-2000-0596Microsoft · 25% likely

    Microsoft

13. An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argumen…CVE-2000-0631Microsoft · 25% likely

    Microsoft

14. Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outsid…CVE-2000-0621Microsoft · 22% likely

    Microsoft

15. Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http"…CVE-2000-0676Netscape · 20% likely

    Netscape

16. Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.CVE-2000-0347Microsoft · 18% likely

    Microsoft

17. IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypa…CVE-2000-0770Microsoft · 15% likely

    Microsoft

18. Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.CVE-2000-0002Zbsoft · 14% likely
19. Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.CVE-2000-0065Avtronics · 13% likely
20. Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal fie…CVE-2000-0655Netscape · 13% likely

    Netscape

21. Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long…CVE-2000-0743University Of Minnesota · 13% likely

    University Of Minnesota

22. Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD var…CVE-2000-0733Sgi · 12% likely

    Sgi

23. BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the…CVE-2000-0685Bea · 12% likely

    Bea

24. BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on…CVE-2000-0684Bea · 12% likely

    Bea

25. Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to…CVE-2000-0597Microsoft · 12% likely

    Microsoft

26. admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the…CVE-2000-0745Francisco Burzi · 12% likely

    Francisco Burzi

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.