Possible (1 to 10%)

Every one of the 73 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers…CVE-2003-0767Gamespy · 9.2% likely

   Gamespy

2. "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.CVE-2003-0682Openbsd · 8.8% likely

   Openbsd

3. Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash…CVE-2003-0748Sap · 8.1% likely

   SAP

4. Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).CVE-2003-0762Foxweb · 7.8% likely
5. The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.CVE-2003-0765Nullsoft · 7.0% likely

   Nullsoft

6. Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner,…CVE-2003-0766Ftp Desktop · 6.9% likely
7. RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is exec…CVE-2003-0726Realnetworks · 6.8% likely

   Realnetworks

8. Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve"…CVE-2003-0802Nokia · 6.6% likely

   Nokia

9. Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.CVE-2003-0755Gtkftpd · 6.5% likely
10. Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-…CVE-2003-0730Xfree86 Project · 5.8% likely

    Xfree86 Project

11. Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO…CVE-2003-0743University Of Cambridge · 5.7% likely

    University Of Cambridge

12. Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.CVE-2003-0803Nokia · 5.6% likely

    Nokia

13. Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certa…CVE-2003-0746Hp · 5.5% likely

    HP

14. Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.CVE-2003-0705Nicolas Boullis · 5.1% likely
15. Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command,…CVE-2003-0805University Of Minnesota · 5.0% likely

    University Of Minnesota

16. Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically exec…CVE-2003-0664Microsoft · 4.1% likely

    Microsoft

17. Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote atta…CVE-2003-0761Digium · 4.0% likely

    Digium

18. Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array…CVE-2003-0721Washington · 4.0% likely

    CWE-129

19. Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.CVE-2003-0723Gkrellm · 3.9% likely
20. Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffe…CVE-2003-0695Openbsd · 3.8% likely

    Openbsd

21. Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.CVE-2003-0769Mirabilis · 3.7% likely

    Mirabilis

22. Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal co…CVE-2003-0749Sap · 3.7% likely

    SAP

23. The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a…CVE-2003-0688Sendmail · 3.6% likely

    Sendmail

24. The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which…CVE-2003-0786Openbsd · 3.6% likely

    Openbsd

25. Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).CVE-2003-0706Nicolas Boullis · 3.4% likely
26. Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.CVE-2003-0760Optisoft · 3.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.