Likely to be exploited (10% or more)

Every one of the 67 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a…CVE-2001-0500Microsoft · 97% likely

   Microsoft

2. Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.CVE-2001-0803Open Group · 86% likely

   CWE-119Open Group

3. Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.CVE-2001-0236Sun · 72% likely

   Sun Microsystems

4. Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desk…CVE-2001-0540Microsoft · 71% likely

   Microsoft

5. Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the ove…CVE-2001-0506Microsoft · 69% likely

   Microsoft

6. Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.CVE-2001-0779Sun · 62% likely

   Sun Microsystems

7. Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL w…CVE-2001-1217Oracle · 54% likely

   Oracle

8. Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.CVE-2001-0538Microsoft · 53% likely

   Microsoft

9. ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr ext…CVE-2000-0457Microsoft · 53% likely

   Microsoft

10. Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.CVE-2001-0876Microsoft · 49% likely

    Microsoft

11. Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SI…CVE-2000-1200Microsoft · 48% likely

    Microsoft

12. Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to…CVE-2001-0877Microsoft · 44% likely

    Microsoft

13. Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).CVE-2001-0846Lotus · 41% likely

    Lotus

14. Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You T…CVE-2001-0554Mit · 39% likely

    CWE-120Mit

15. Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.CVE-2001-0663Microsoft · 32% likely

    Microsoft

16. Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users i…CVE-2001-0875Microsoft · 28% likely

    Microsoft

17. Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."CVE-2001-0722Microsoft · 28% likely

    Microsoft

18. annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705.CVE-2000-0830Microsoft · 26% likely

    Microsoft

19. IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.CVE-1999-1223Microsoft · 23% likely

    Microsoft

20. RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.CVE-2001-0662Microsoft · 23% likely

    Microsoft

21. Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash.CVE-2000-0581Microsoft · 22% likely

    Microsoft

22. Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that…CVE-2001-0660Microsoft · 22% likely

    Microsoft

23. Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain…CVE-2001-0874Microsoft · 22% likely

    Microsoft

24. Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers…CVE-1999-1105Microsoft · 22% likely

    Microsoft

25. Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED).CVE-2000-0662Microsoft · 21% likely

    Microsoft

26. Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities s…CVE-2001-0504Microsoft · 21% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.