Likely to be exploited (10% or more)

Every one of the 53 is a mark on the map. Named now: 1 to 26, most at risk first.

1. clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen…CVE-2007-4560Clam Anti-Virus · 84% likely

   CWE-78Clam Anti-Virus

2. PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root paramete…CVE-2007-4279Frontaccounting · 75% likely

   Frontaccounting

3. PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder par…CVE-2007-4320Ncaster · 72% likely
4. Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other…CVE-2007-4636Phpbg · 71% likely

   CWE-20

5. PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a UR…CVE-2007-4313Php Blue Dragon · 69% likely
6. Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long A…CVE-2007-4440Pmail · 65% likely

   CWE-119Pmail

7. Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000.CVE-2007-4370Racer · 59% likely
8. Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web…CVE-2007-3386Apache · 59% likely

   CWE-79Apache

9. Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows r…CVE-2007-4607Gate Comm Software · 56% likely

   CWE-119

10. Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vec…CVE-2007-2931Microsoft · 55% likely

    CWE-119Microsoft

11. Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbi…CVE-2007-3034Microsoft · 52% likely

    CWE-189Microsoft

12. PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute arbitrary PHP code via a URL in the forma…CVE-2007-4232Andreas Robertz · 52% likely
13. Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft Dire…CVE-2007-4336Microsoft · 51% likely

    Microsoft

14. Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which ca…CVE-2007-2223Microsoft · 49% likely

    CWE-119Microsoft

15. Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to e…CVE-2007-1749Microsoft · 42% likely

    Microsoft

16. The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execu…CVE-2007-2216Microsoft · 41% likely

    CWE-16Microsoft

17. Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive…CVE-2007-3382Apache · 37% likely

    CWE-200Apache

18. Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote atta…CVE-2007-2224Microsoft · 35% likely

    CWE-119Microsoft

19. Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execu…CVE-2007-4515Yahoo · 33% likely

    CWE-119Yahoo

20. Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote att…CVE-2007-3872Hp · 30% likely

    HP

21. Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arbitrary code via unknown vectors related…CVE-2007-3041Microsoft · 29% likely

    Microsoft

22. Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index…CVE-2007-3890Microsoft · 29% likely

    Microsoft

23. Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute ar…CVE-2007-3033Microsoft · 28% likely

    CWE-79Microsoft

24. Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style Sheets (CSS) strings that trigger memor…CVE-2007-0943Microsoft · 27% likely

    Microsoft

25. Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary file…CVE-2007-4559Python · CVSS 9.8 · 27% likely

    CWE-22Python

26. Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of servic…CVE-2007-2927Microsoft · 26% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.