Possible (1 to 10%)

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka on…CVE-2001-0045Microsoft · 8.4% likely

   Microsoft

2. Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers.CVE-2001-0037Keware Technologies · 7.9% likely
3. mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of oth…CVE-2001-0027Proftpd Project · 6.5% likely

   Proftpd

4. Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter.CVE-2001-0075Technote Inc · 6.5% likely
5. Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long Defin…CVE-2001-0127Oliver Debon · 6.4% likely
6. Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained…CVE-2001-0029Igor Khasilev · 6.1% likely
7. The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) pack…CVE-2001-0047Microsoft · 5.6% likely

   Microsoft

8. simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.CVE-2001-0024Leif M. Wright · 5.4% likely

   Leif M. Wright

9. register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that…CVE-2001-0076Ikonboard.com · 5.2% likely

   Ikonboard.com

10. The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive i…CVE-2001-0046Microsoft · 5.0% likely

    Microsoft

11. Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command.CVE-2001-0065Max-Wilhelm Bruker · 4.8% likely
12. Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a…CVE-2001-0032Eric Rescorla · 4.3% likely
13. Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command.CVE-2001-0070Upland Solutions · 4.1% likely
14. Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to exec…CVE-2001-0134Compaq · 4.0% likely

    Compaq

15. Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.CVE-2001-0038Metaproducts · 3.3% likely
16. The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request.CVE-2001-0097Infinite · 3.2% likely
17. WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.CVE-2001-0049Watchguard · 3.1% likely

    WatchGuard

18. Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the board parameter.CVE-2001-0074Technote Inc · 3.0% likely
19. Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.CVE-1999-0784Oracle · 2.8% likely

    Oracle

20. IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.CVE-2001-0051Ibm · 2.8% likely

    IBM

21. ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.CVE-1999-0359Marc Schaefer · 2.5% likely
22. Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.CVE-2001-0082Checkpoint · 2.4% likely

    Check Point

23. htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0131Apache · 2.3% likely

    CWE-59Apache

24. statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.CVE-2001-0114Omnicron · 2.2% likely

    Omnicron

25. The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to snif…CVE-2001-0133Trend Micro · 2.2% likely

    Trend Micro

26. The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access…CVE-2001-0048Microsoft · 2.0% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.