Possible (1 to 10%)

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitr…CVE-2003-0044Apache · 9.1% likely

   Apache

2. Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.CVE-2003-0038Gnu · 4.8% likely

   GNU

3. Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.CVE-2002-1400Postgresql · 3.9% likely

   Postgresql

4. Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute a…CVE-2002-1393Kde · 3.7% likely

   Kde

5. Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code.CVE-2003-0037Noffle · 3.3% likely
6. Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative…CVE-2002-1397Postgresql · 2.8% likely

   Postgresql

7. Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial…CVE-2002-1401Postgresql · 2.2% likely

   CWE-119Postgresql

8. The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and pa…CVE-2002-0628Polycom · 2.2% likely

   CWE-307Polycom

9. Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.CVE-2002-0626Polycom · 1.8% likely

   Polycom

10. Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid…CVE-2002-1399Postgresql · 1.8% likely

    Postgresql

11. Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).CVE-2003-0031Mcrypt · 1.7% likely

    Mcrypt

12. The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.CVE-2002-0629Polycom · 1.6% likely

    Polycom

13. Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment…CVE-2003-0034Jean-Jacques Sarton · 1.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.