Likely to be exploited (10% or more)

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a cra…CVE-2005-1983Microsoft · 93% likely

   Microsoft

2. VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static…CVE-2005-2611Symantec Veritas · 87% likely

   Symantec Veritas

3. Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523,…CVE-2005-2535Broadcom · 81% likely

   Broadcom

4. Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute ar…CVE-2005-2668Ca · 75% likely

   Ca

5. chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was…CVE-2004-2466Efs Software · 75% likely

   CWE-119Efs Software

6. Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code…CVE-2005-1272Ca · 66% likely

   Ca

7. Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embed…CVE-2005-2127Microsoft · 63% likely

   CWE-119Microsoft

8. Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.CVE-2004-2416Youngzsoft · 61% likely

   Youngzsoft

9. The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote…CVE-2005-1218Microsoft · 57% likely

   Microsoft

10. Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vector…CVE-2005-2551Novell · 55% likely

    Novell

11. Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a…CVE-2005-1984Microsoft · 55% likely

    Microsoft

12. upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.CVE-2005-2733Alexander Palmo · 52% likely

    Alexander Palmo

13. Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSID…CVE-2005-1990Microsoft · 49% likely

    Microsoft

14. Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 al…CVE-2005-0058Microsoft · 46% likely

    Microsoft

15. Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder…CVE-2005-1989Microsoft · 46% likely

    Microsoft

16. Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image tha…CVE-2005-1988Microsoft · 46% likely

    Microsoft

17. Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost…CVE-2005-2678Microsoft · 44% likely

    Microsoft

18. Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.CVE-2005-2612Wordpress · 39% likely

    WordPress

19. Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dere…CVE-2004-2434Microsoft · 33% likely

    Microsoft

20. Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value th…CVE-2004-2289Microsoft · 24% likely

    Microsoft

21. Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML documen…CVE-2004-2383Microsoft · 20% likely

    Microsoft

22. Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an…CVE-2005-2103Gaim Project · CVSS 9.8 · 16% likely

    CWE-131

23. Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a lo…CVE-2005-2665Elm Development Group · 15% likely

    Elm Development Group

24. Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML ta…CVE-2004-2307Microsoft · 15% likely

    Microsoft

25. Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (ser…CVE-2003-1228Mathopd · 14% likely

    CWE-120

26. Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacte…CVE-2004-2425Axis · 14% likely

    Axis

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.