Likely to be exploited (10% or more)

Every one of the 50 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lon…CVE-2001-0414Dave Mills · 92% likely
2. Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.CVE-2001-0333Microsoft · 91% likely

   Microsoft

3. Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension throu…CVE-2001-0241Microsoft · 86% likely

   Microsoft

4. guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.p…CVE-1999-1053Apache · 85% likely

   Apache

5. The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via…CVE-2000-0945Cisco · 73% likely

   Cisco

6. Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.CVE-1999-1551Ipswitch · 72% likely

   Ipswitch

7. Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or…CVE-1999-1510Bisonware · 67% likely

   Bisonware

8. Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly in…CVE-2001-0136Proftpd · 45% likely

   CWE-401Proftpd

9. IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.CVE-1999-0154Microsoft · 40% likely

   Microsoft

10. A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CG…CVE-1999-1412Apache · 36% likely

    Apache

11. FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.CVE-1999-1375Microsoft · 31% likely

    Microsoft

12. Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration r…CVE-2001-0341Microsoft · 30% likely

    Microsoft

13. IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parse…CVE-2001-0004Microsoft · 28% likely

    Microsoft

14. Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.CVE-2001-0239Microsoft · 28% likely

    Microsoft

15. Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsS…CVE-1999-1484Microsoft · 27% likely

    Microsoft

16. When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to ga…CVE-1999-1538Microsoft · 25% likely

    Microsoft

17. Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.CVE-1999-1376Microsoft · 24% likely

    Microsoft

18. Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that…CVE-1999-1387Microsoft · 21% likely

    Microsoft

19. FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.CVE-2001-0335Microsoft · 21% likely

    Microsoft

20. Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.CVE-2001-0348Microsoft · 19% likely

    Microsoft

21. Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting withou…CVE-2001-0237Microsoft · 18% likely

    Microsoft

22. Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the H…CVE-2001-0243Microsoft · 18% likely

    Microsoft

23. The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.CVE-1999-1451Microsoft · 18% likely

    Microsoft

24. Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode a…CVE-1999-1033Microsoft · 18% likely

    Microsoft

25. Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the firs…CVE-1999-1463Microsoft · 17% likely

    Microsoft

26. A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.CVE-2001-0679Trend Micro · 16% likely

    Trend Micro

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.