Likely to be exploited (10% or more)

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses…CVE-2001-1243Microsoft · 71% likely

   Microsoft

2. Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffe…CVE-2001-1320Pgp · 68% likely

   Pgp

3. Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.CVE-2002-0325Working Resources Inc. · 38% likely

   Working Resources Inc.

4. Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS…CVE-2001-1319Microsoft · 33% likely

   Microsoft

5. The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to…CVE-2002-0224Microsoft · 29% likely

   Microsoft

6. Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data.CVE-2002-0283Microsoft · 28% likely

   Microsoft

7. Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesh…CVE-2001-1325Microsoft · 27% likely

   Microsoft

8. Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small num…CVE-2001-1244Freebsd · 22% likely

   Freebsd

9. Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly trigger…CVE-2002-0201Cyberstop · 21% likely
10. Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation,…CVE-2002-0228Microsoft · 20% likely

    Microsoft

11. Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource fil…CVE-2002-0189Microsoft · 14% likely

    Microsoft

12. Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to (1) ezboard.…CVE-2002-0263Ezne.net · 13% likely
13. Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request.CVE-2002-0289Bbshareware.com · 13% likely
14. Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow r…CVE-2002-0285Microsoft · 12% likely

    Microsoft

15. Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script…CVE-2002-0269Microsoft · 11% likely

    Microsoft

16. Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote serve…CVE-2002-0242Microsoft · 11% likely

    Microsoft

17. Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.CVE-2002-0252Apple · 11% likely

    Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.