Likely to be exploited (10% or more)

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png…CVE-2004-0597Greg Roelofs · 82% likely

   Greg Roelofs

2. Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via…CVE-2004-0636Aol · 66% likely

   Aol

3. Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.CVE-2004-0798Progress · 63% likely

   Progress Software

4. Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WA…CVE-2004-0557Sox · 25% likely
5. Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML…CVE-2004-0203Microsoft · 21% likely

   CWE-79Microsoft

6. Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different iss…CVE-2004-0771Tsugio Okamoto · 19% likely

   Tsugio Okamoto

7. Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possib…CVE-2004-0691Trolltech · 15% likely

   Trolltech

8. Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute…CVE-2004-0722Mozilla · 13% likely

   Mozilla

9. Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote atta…CVE-2004-0777Inter7 · 11% likely

   CWE-134Inter7

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.