Possible (1 to 10%)

Every one of the 155 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature.CVE-2002-0832Microsoft · 9.9% likely

   Microsoft

2. Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event…CVE-2002-0962Geeklog · 8.6% likely

   Geeklog

3. Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site v…CVE-2002-0955Yabb · 8.6% likely

   Yabb

4. Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attac…CVE-2002-0978Microsoft · 8.3% likely

   Microsoft

5. Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10…CVE-2002-0893New Atlanta Communications · 8.3% likely

   New Atlanta Communications

6. Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.CVE-2001-1408Cobalt · 8.1% likely
7. Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.CVE-2002-0982Microsoft · 7.8% likely

   Microsoft

8. Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (SSI) as the web server, via the (1) Na…CVE-2002-0948Scripts For Educators · 7.6% likely
9. The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(n…CVE-2002-0937Macromedia · 7.4% likely

   Macromedia

10. Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Mat…CVE-2002-1036Zoltan Milosevic · 7.2% likely
11. Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the scr…CVE-2002-0959Splatt · 7.2% likely
12. Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.CVE-2002-0876Evolvable Corporation · 7.2% likely

    Evolvable Corporation

13. Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the…CVE-2002-0902Phpbb Group · 7.2% likely

    Phpbb Group

14. Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers v…CVE-2002-1008Summit Computer Networks · 7.1% likely
15. Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via…CVE-2002-1009Summit Computer Networks · 7.0% likely
16. CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Se…CVE-2002-0923Cgiscript.net · 7.0% likely

    Cgiscript.net

17. Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588…CVE-2002-1001Analogx · 6.5% likely

    Analogx

18. Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windo…CVE-2002-0699Microsoft · 6.5% likely

    Microsoft

19. The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execut…CVE-2002-0979Microsoft · 6.5% likely

    Microsoft

20. Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1)…CVE-2002-0942Lumigent · 6.2% likely
21. Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminp…CVE-2002-0855Gnu · 6.1% likely

    GNU

22. Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.CVE-2002-0874Redhat · 5.8% likely

    Red Hat

23. Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) Fro…CVE-2002-1075David Harris · 5.7% likely

    David Harris

24. Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.CVE-2002-1073Atrium Software · 5.7% likely

    Atrium Software

25. Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private me…CVE-2002-0928Pirch · 5.7% likely
26. Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amind…CVE-2002-0901Amanda · 5.7% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.