Likely to be exploited (10% or more)

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a la…CVE-2002-0656Openssl · 90% likely

   OpenSSL

2. Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or e…CVE-2002-0649Microsoft · 85% likely

   CWE-119Microsoft

3. Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] var…CVE-2002-0764Phorum · 38% likely

   Phorum

4. The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.CVE-2002-0659Openssl · 36% likely

   OpenSSL

5. Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malic…CVE-2002-0702Isc · 31% likely

   Isc

6. Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain contro…CVE-2002-0624Microsoft · 23% likely

   Microsoft

7. Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security cont…CVE-2002-0620Microsoft · 15% likely

   Microsoft

8. Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.CVE-2002-0799Youngzsoft · 14% likely

   Youngzsoft

9. Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddlad…CVE-2002-0644Microsoft · 11% likely

   Microsoft

10. Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration pri…CVE-2002-0641Microsoft · 11% likely

    Microsoft

11. PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-da…CVE-2002-0717Php · 11% likely

    PHP

12. CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.CVE-2002-0749Cgiscript.net · 11% likely

    Cgiscript.net

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.