Possible (1 to 10%)

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI…CVE-2000-1023Alabanza · 8.6% likely
2. Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the categor…CVE-2000-0906Moreover.com · 8.6% likely
3. eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which in…CVE-2000-1025Unify · 8.5% likely

   Unify

4. Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords…CVE-2000-1033Cat Soft · 7.6% likely
5. Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long…CVE-2000-1046Lotus · 6.1% likely

   Lotus

6. Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.CVE-2000-0971Avirt · 5.6% likely

   Avirt

7. FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote atta…CVE-2000-0916Freebsd · 5.5% likely

   Freebsd

8. Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.CVE-2000-0985Nevis Systems · 5.4% likely
9. ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.CVE-2000-1078Mirabilis · 5.2% likely

   Mirabilis

10. Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.CVE-2000-0940Metertek · 4.3% likely
11. Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.CVE-2000-1021Alt-N · 3.8% likely

    Alt-N

12. Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine…CVE-2000-1037Checkpoint · 3.3% likely

    Check Point

13. Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.CVE-2000-1062Hp · 3.1% likely

    HP

14. Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0903Qnx · 3.0% likely

    Qnx

15. Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.CVE-2000-1064Hp · 2.9% likely

    HP

16. Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.CVE-2000-1063Hp · 2.9% likely

    HP

17. Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed p…CVE-2000-1065Hp · 2.8% likely

    HP

18. Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to…CVE-2000-0904Qnx · 2.7% likely

    Qnx

19. Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a…CVE-2000-0986Oracle · 2.3% likely

    Oracle

20. Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.CVE-2000-1020Alt-N · 2.3% likely

    Alt-N

21. The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly exec…CVE-2000-1015Open Source Development Network · 2.2% likely

    Open Source Development Network

22. QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.ht…CVE-2000-0905Qnx · 2.1% likely

    Qnx

23. Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.CVE-2000-0931David Harris · 2.0% likely

    David Harris

24. EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.CVE-2000-0907Etype · 2.0% likely

    Etype

25. Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.CVE-2000-0954Evolvable Corporation · 1.9% likely

    Evolvable Corporation

26. Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack th…CVE-2000-0955Cisco · 1.8% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.