Likely to be exploited (10% or more)

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execut…CVE-2002-1254Microsoft · 54% likely

   Microsoft

2. Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execu…CVE-2002-1181Microsoft · 39% likely

   Microsoft

3. Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing…CVE-2002-0869Microsoft · 24% likely

   Microsoft

4. The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.…CVE-2002-1292Microsoft · 22% likely

   Microsoft

5. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contain…CVE-2002-1286Microsoft · 21% likely

   Microsoft

6. Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through…CVE-2002-1287Microsoft · 20% likely

   Microsoft

7. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to…CVE-2002-1291Microsoft · 18% likely

   Microsoft

8. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePat…CVE-2002-1288Microsoft · 17% likely

   Microsoft

9. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute…CVE-2002-1289Microsoft · 16% likely

   Microsoft

10. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities vi…CVE-2002-1295Microsoft · 15% likely

    Microsoft

11. The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attac…CVE-2002-1293Microsoft · 15% likely

    Microsoft

12. The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of s…CVE-2002-1294Microsoft · 15% likely

    Microsoft

13. The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipB…CVE-2002-1290Microsoft · 14% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.