Possible (1 to 10%)

Every one of the 255 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine…CVE-1999-1110Microsoft · 9.8% likely

   Microsoft

2. Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.CVE-1999-1547Oracle · 9.7% likely

   CWE-20Oracle

3. ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP…CVE-1999-1431Microsoft · 9.7% likely

   Microsoft

4. Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-0926Apache · 9.4% likely

   Apache

5. PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is open…CVE-1999-1474Microsoft · 9.3% likely

   Microsoft

6. Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, w…CVE-1999-1361Microsoft · 8.6% likely

   Microsoft

7. Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.CVE-2001-0495Datawizard · 8.5% likely

   Datawizard

8. Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary…CVE-1999-1557Ipswitch · 8.4% likely

   Ipswitch

9. Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.CVE-1999-1509Etype · 8.3% likely

   Etype

10. Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.CVE-1999-1533Trend Micro · 8.1% likely

    Trend Micro

11. Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary comm…CVE-1999-1237Apache · 8.1% likely

    CWE-120Apache

12. Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and…CVE-1999-1508Tek · 8.1% likely
13. Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code…CVE-1999-1521Computalynx · 8.1% likely

    Computalynx

14. Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.CVE-2001-0189Intranet-Server · 8.1% likely
15. Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.CVE-1999-1069Icat · 8.1% likely
16. Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachme…CVE-1999-1050Matt Wright · 7.9% likely

    Matt Wright

17. Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or…CVE-1999-1016Microsoft · 7.7% likely

    Microsoft

18. ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.CVE-2001-0215Martin Hamilton · 7.5% likely
19. AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.CVE-2000-0243Analogx · 7.3% likely

    Analogx

20. IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules…CVE-1999-1018Linux · 7.2% likely

    Linux

21. Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.CVE-1999-1519Gene6 · 7.1% likely

    Gene6

22. counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log tha…CVE-1999-1030Behold Software · 7.1% likely
23. The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as…CVE-1999-1020Novell · 7.1% likely

    Novell

24. Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.CVE-1999-1082T. Hauck · 6.6% likely

    T. Hauck

25. Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.CVE-2001-0345Microsoft · 6.6% likely

    Microsoft

26. banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.CVE-2001-0383Francisco Burzi · 6.5% likely

    Francisco Burzi

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.