Possible (1 to 10%)

Every one of the 147 is a mark on the map. Named now: 1 to 26, most at risk first.

1. BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.CVE-2000-0908Netcplus · 9.7% likely
2. Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerm…CVE-2000-0991Hilgraeve · 9.7% likely
3. The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list t…CVE-2000-0883Mandrakesoft · 9.5% likely

   Mandrakesoft

4. DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.CVE-2000-1132Dcscripts · 9.3% likely

   Dcscripts

5. mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which i…CVE-2000-0977Oatmeal Studios · 8.6% likely
6. Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a l…CVE-2000-1054Cisco · 8.4% likely

   Cisco

7. Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request…CVE-2000-0920Boa · 8.4% likely

   Boa

8. Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request…CVE-2000-1050Macromedia · 8.2% likely

   Macromedia

9. Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page paramet…CVE-2000-0921Hassan Consulting · 8.1% likely
10. Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0919Phpix · 8.0% likely
11. Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admi…CVE-2000-1181Realnetworks · 7.9% likely

    Realnetworks

12. The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to…CVE-2000-0925Smartwin Technology · 7.9% likely
13. Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" param…CVE-2000-0924Armada Design · 7.9% likely
14. Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduc…CVE-2000-0937Samba · 7.7% likely

    Samba

15. Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.CVE-2000-0930David Harris · 7.7% likely

    David Harris

16. Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Esca…CVE-2000-0851Microsoft · 7.6% likely

    Microsoft

17. The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain s…CVE-2000-1016Suse · 7.6% likely

    SUSE

18. YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0853Yabb · 7.6% likely

    Yabb

19. named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."CVE-2000-0888Isc · 7.5% likely

    Isc

20. POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid em…CVE-2000-1002Stalker · 7.5% likely

    Stalker

21. Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request.CVE-2000-0766Vqsoft · 7.3% likely
22. The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted comma…CVE-2000-1022Cisco · 7.1% likely

    Cisco

23. SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.CVE-2000-0926Smartwin Technology · 7.0% likely
24. Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.CVE-2000-0848Ibm · 6.4% likely

    IBM

25. Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.CVE-2000-0992Openbsd · 6.0% likely

    Openbsd

26. The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, d…CVE-2000-0254Craig Dansie · 6.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.