Likely to be exploited (10% or more)

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages tha…CVE-2000-1209Compaq · 87% likely

   Compaq

2. Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) s…CVE-2002-0661Apache · 70% likely

   Apache

3. Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the path…CVE-2002-0654Apache · 59% likely

   Apache

4. Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, an…CVE-2002-0721Microsoft · 46% likely

   Microsoft

5. The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup…CVE-2002-0936Apache · 27% likely

   Apache

6. The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary…CVE-2002-0980Microsoft · 27% likely

   Microsoft

7. Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TR…CVE-2002-0724Microsoft · 26% likely

   Microsoft

8. Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), whi…CVE-2000-1205Apache · 24% likely

   CWE-79Apache

9. Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy m…CVE-2002-0861Microsoft · 16% likely

   Microsoft

10. Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke execut…CVE-2002-0723Microsoft · 15% likely

    Microsoft

11. Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modif…CVE-2002-0976Microsoft · 14% likely

    Microsoft

12. Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle D…CVE-2002-0857Oracle · 14% likely

    Oracle

13. HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2…CVE-2002-1048Hp · 14% likely

    HP

14. Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.CVE-2002-0975Microsoft · 13% likely

    Microsoft

15. Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value.CVE-2002-0977Microsoft · 11% likely

    Microsoft

16. IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.CVE-2002-1077Ipswitch · 11% likely

    Ipswitch

17. Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin d…CVE-2000-1204Apache · 10% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.