Likely to be exploited (10% or more)

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed messag…CVE-2003-0352Microsoft · 98% likely

   Microsoft

2. The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to…CVE-2003-0605Microsoft · 59% likely

   Microsoft

3. Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.CVE-2003-0558Leapware · 56% likely
4. Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a vict…CVE-2001-1410Microsoft · 51% likely

   Microsoft

5. Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.CVE-2003-0231Microsoft · 36% likely

   Microsoft

6. Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB pa…CVE-2003-0345Microsoft · 35% likely

   Microsoft

7. Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length f…CVE-2003-0346Microsoft · 33% likely

   Microsoft

8. Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an…CVE-2003-0507Microsoft · 27% likely

   Microsoft

9. Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL contain…CVE-2003-0526Microsoft · 22% likely

   Microsoft

10. SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privil…CVE-2003-0500Proftpd Project · 18% likely

    Proftpd

11. Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the d…CVE-2003-0567Cisco · 17% likely

    CWE-20Cisco

12. Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute a…CVE-2003-0252Linux-Nfs · 16% likely

    CWE-193

13. Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string.CVE-2003-0562Novell · 14% likely

    Novell

14. Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer r…CVE-2003-0505Microsoft · 14% likely

    Microsoft

15. The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are received over the pipe, which could allo…CVE-2003-0460Apache · 13% likely

    Apache

16. Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions an…CVE-2003-0604Microsoft · 13% likely

    Microsoft

17. Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device nam…CVE-2003-0519Microsoft · 11% likely

    Microsoft

18. Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the c…CVE-2003-0506Microsoft · 11% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.