Possible (1 to 10%)

Every one of the 342 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.CVE-2001-1196Webmin · 9.8% likely

   Webmin

2. Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters.CVE-2001-0784Icecast · 9.4% likely

   Icecast

3. Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allow…CVE-1999-1246Microsoft · 9.2% likely

   Microsoft

4. template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi.CVE-2001-0461Denis Howe · 9.0% likely
5. IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privil…CVE-2001-0507Microsoft · 8.8% likely

   MicrosoftFIN13

6. Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.CVE-2001-0596Netscape · 8.7% likely

   Netscape

7. TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.CVE-2001-0852Redhat · 8.7% likely

   Red Hat

8. bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.CVE-1999-1550F5 · 8.6% likely

   F5

9. Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet t…CVE-2002-0058Sun · 8.6% likely

   Sun Microsystems

10. Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.CVE-2001-1216Oracle · 8.5% likely

    Oracle

11. The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrar…CVE-2000-0788Microsoft · 8.4% likely

    Microsoft

12. Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.CVE-2002-0112Etype · 8.1% likely

    Etype

13. Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.CVE-2001-1209Abe Timmerman · 8.0% likely
14. Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOT…CVE-2001-1109Khamil Landross And Zack Jones · 8.0% likely

    Khamil Landross And Zack Jones

15. Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via…CVE-2001-0659Microsoft · 8.0% likely

    Microsoft

16. Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.CVE-2001-0805Tarantella · 7.9% likely

    Tarantella

17. Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies…CVE-2001-0857Imp · 7.9% likely
18. Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, whi…CVE-2002-0136Microsoft · 7.7% likely

    Microsoft

19. Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.CVE-2001-1212Aktivate · 7.6% likely
20. AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.CVE-2001-1170Amtote International · 7.6% likely
21. Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.CVE-2001-0007Netscreen · 7.5% likely
22. Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0180Generation Terrorists Designs And Concepts · 7.4% likely
23. When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect I…CVE-1999-1473Microsoft · 7.4% likely

    Microsoft

24. Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.CVE-2001-0879Microsoft · 7.4% likely

    Microsoft

25. Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.CVE-2001-1195Novell · 7.3% likely

    Novell

26. generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter.CVE-2001-1115Sixhead · 7.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.