Possible (1 to 10%)

Every one of the 440 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that…CVE-2005-2409Nbsmtp · 9.9% likely
2. blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requ…CVE-2004-2347Leif M. Wright · 9.9% likely

   Leif M. Wright

3. Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source.CVE-2004-2476Microsoft · 9.1% likely

   Microsoft

4. Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared aga…CVE-2004-2443Jaws · 8.8% likely

   Jaws

5. Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed script…CVE-2005-2455Greasemonkey · 8.5% likely
6. Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter.CVE-2004-2445Jaws · 8.4% likely

   Jaws

7. Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of servi…CVE-2005-1268Apache · 8.4% likely

   CWE-193Apache

8. Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier,…CVE-2004-2286Activestate · 8.0% likely

   Activestate

9. Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet head…CVE-2005-2719Flagship Industries · 7.8% likely
10. Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed…CVE-2005-2669Ca · 7.3% likely

    Ca

11. Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field.CVE-2005-2577Wyse · 7.2% likely
12. Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to…CVE-2005-2640Juniper · 7.1% likely

    Juniper Networks

13. Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long T…CVE-2004-2422Ipswitch · 7.1% likely

    Ipswitch

14. EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.CVE-2004-2385Emumail · 6.7% likely

    Emumail

15. PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitra…CVE-2003-1227Gallery Project · 6.7% likely

    CWE-94Gallery Project

16. The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to loca…CVE-2005-2729Astaro · 6.6% likely

    Astaro

17. Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via…CVE-2005-1981Microsoft · 6.6% likely

    Microsoft

18. Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.CVE-2005-2507Apple · 6.2% likely

    Apple

19. Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary me…CVE-2005-2367Ethereal Group · 6.1% likely

    Ethereal Group

20. CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 (carriage return) in th…CVE-2005-2540Flatnuke · 6.1% likely

    Flatnuke

21. Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remo…CVE-2002-2103Apache · 6.1% likely

    Apache

22. Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the download parameter.CVE-2005-2543Comdev · 6.0% likely

    Comdev

23. Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER c…CVE-2004-23751st Class Internet Solutions · 5.9% likely
24. Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…CVE-2005-2639Valusoft · 5.8% likely
25. Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP da…CVE-2004-2449Gamespy · 5.7% likely

    Gamespy

26. Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain p…CVE-2004-2359Dell · 5.6% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.