Likely to be exploited (10% or more)

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause…CVE-2011-2110Adobe · 86% likely

   CWE-119Adobe

2. Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote atta…CVE-2011-2371Mozilla · 76% likely

   CWE-189Mozilla

3. The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable…CVE-2011-2039Cisco · 70% likely

   CWE-20Cisco

4. Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not pro…CVE-2011-1260Microsoft · 67% likely

   CWE-119Microsoft

5. Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a pat…CVE-2011-2474Sybase · 64% likely

   CWE-22Sybase

6. Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary c…CVE-2011-1220Ibm · 63% likely

   CWE-119IBM

7. VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with…CVE-2011-2386Visiwave · 45% likely

   CWE-94

8. The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remo…CVE-2011-1255Microsoft · 42% likely

   CWE-908Microsoft

9. Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client)…CVE-2011-2217Vmware · 42% likely

   CWE-119VMware

10. Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibili…CVE-2011-1276Microsoft · 28% likely

    CWE-119Microsoft

11. The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSett…CVE-2010-4804Google · 27% likely

    CWE-200Google

12. Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script…CVE-2011-2179Icinga · 26% likely

    CWE-79Icinga

13. The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of servi…CVE-2011-1267Microsoft · 24% likely

    CWE-399Microsoft

14. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not…CVE-2011-1261Microsoft · 22% likely

    CWE-908Microsoft

15. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not…CVE-2011-1250Microsoft · 22% likely

    CWE-908Microsoft

16. Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Se…CVE-2011-0658Microsoft · 21% likely

    CWE-189Microsoft

17. Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors…CVE-2011-2383Microsoft · 21% likely

    CWE-20Microsoft

18. The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to…CVE-2011-2202Php · 20% likely

    CWE-264PHP

19. Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers t…CVE-2011-2382Microsoft · 19% likely

    CWE-20Microsoft

20. win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7…CVE-2011-1873Microsoft · 19% likely

    CWE-20Microsoft

21. Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not…CVE-2011-1256Microsoft · 19% likely

    CWE-908Microsoft

22. The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to…CVE-2011-1266Microsoft · 18% likely

    CWE-908Microsoft

23. Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not…CVE-2011-1254Microsoft · 18% likely

    CWE-908Microsoft

24. Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly…CVE-2011-1251Microsoft · 18% likely

    CWE-908Microsoft

25. Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, E…CVE-2011-1272Microsoft · 18% likely

    CWE-20Microsoft

26. Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel…CVE-2011-1279Microsoft · 17% likely

    CWE-119Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.