Possible (1 to 10%)

Every one of the 398 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allows remote attackers to…CVE-2007-4582Acti · 10.0% likely

   CWE-119ACTi Corporation

2. Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathnam…CVE-2007-4155Emc · 9.6% likely

   Emc

3. Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicod…CVE-2007-4586Php · 9.4% likely

   CWE-119PHP

4. Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.CVE-2007-4255Php · 9.3% likely

   PHP

5. Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field…CVE-2007-4391Yahoo · 9.3% likely

   CWE-119Yahoo

6. Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain con…CVE-2007-43872wire · 9.2% likely

   2wire Inc

7. index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_lo…CVE-2007-4338Haudenschilt · 8.9% likely

   CWE-264Haudenschilt

8. Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."CVE-2007-4367Opera · 8.7% likely

   CWE-763Opera

9. Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat m…CVE-2007-4533Vavoom · 8.5% likely

   Vavoom

10. The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might o…CVE-2007-4596Php · 8.2% likely

    CWE-94PHP

11. The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (…CVE-2007-4553Thomson · 8.2% likely

    Thomson

12. Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote att…CVE-2007-4583Acti · 8.0% likely

    CWE-22ACTi Corporation

13. ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obt…CVE-2007-4324Adobe · 8.0% likely

    CWE-264Adobe

14. PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP co…CVE-2007-4244Joomla · 7.8% likely

    CWE-94Joomla

15. Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX p…CVE-2007-4578Sophos · 7.3% likely

    CWE-189Sophos

16. Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, re…CVE-2007-4444Rfactor · 7.3% likely
17. Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or…CVE-2007-3618Emc · 7.1% likely

    Emc

18. Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index…CVE-2007-4329Mapos Scripts · 7.0% likely

    Mapos Scripts

19. Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731…CVE-2007-3744Apple · 6.9% likely

    CWE-119Apple

20. Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter…CVE-2007-4328Mapos Scripts · 6.5% likely

    CWE-94Mapos Scripts

21. Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.CVE-2007-4256Ynp · 6.4% likely
22. Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code v…CVE-2007-4221Motorola · 6.3% likely

    CWE-119Motorola

23. Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file,…CVE-2007-4174Tor · 6.2% likely

    CWE-264Tor

24. Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-o…CVE-2007-4638Blizzard Entertainment · 6.2% likely
25. Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute ar…CVE-2007-4508Rebellion · 6.0% likely
26. Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to…CVE-2007-4507Php · 5.8% likely

    PHP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.