Possible (1 to 10%)

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefa…CVE-2002-1121Gfi · 6.7% likely

   GFI Software

2. wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters…CVE-2002-0837Wordtrans · 3.5% likely
3. Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.CVE-2002-1101Cisco · 3.4% likely

   Cisco

4. config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_p…CVE-2002-1114Mantis · 2.8% likely

   Mantis

5. Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthori…CVE-2002-1110Mantis · 2.2% likely

   Mantis

6. Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denia…CVE-2002-1090Libesmtp · 2.0% likely
7. Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files.CVE-2002-1134Hp · 1.9% likely

   HP

8. Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or…CVE-2002-1133Funsoft · 1.8% likely
9. Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login int…CVE-2002-1100Cisco · 1.7% likely

   Cisco

10. Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) vi…CVE-2002-1115Mantis · 1.6% likely

    Mantis

11. Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP ba…CVE-2002-1094Cisco · 1.6% likely

    Cisco

12. Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.CVE-2002-1103Cisco · 1.4% likely

    Cisco

13. The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which…CVE-2002-0664Granite Software · 1.3% likely
14. Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.CVE-2002-1129Compaq · 1.0% likely

    Compaq

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.