Likely to be exploited (10% or more)

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request co…CVE-2011-1865Hp · 89% likely

   CWE-119HP

2. Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 bef…CVE-2011-2882Citrix · 56% likely

   CWE-119Citrix (NetScaler)

3. WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a…CVE-2011-1774Apple · 43% likely

   CWE-20Apple

4. Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in t…CVE-2011-2757Manageengine · 39% likely

   CWE-22Zoho (ManageEngine)

5. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentialit…CVE-2011-2264Oracle · 31% likely

   Oracle

6. Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vector…CVE-2011-2755Manageengine · 31% likely

   CWE-22Zoho (ManageEngine)

7. Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (EAD) 5.0 before SP1 E0101P03 components…CVE-2011-1867Hp · 26% likely

   CWE-119HP

8. WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafte…CVE-2011-0222Apple · 22% likely

   CWE-119Apple

9. Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request…CVE-2011-1866Hp · 21% likely

   CWE-119HP

10. Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named da…CVE-2011-2464Isc · 19% likely

    Isc

11. Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute ar…CVE-2011-2960Sunwayland · 18% likely

    CWE-119

12. NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.CVE-2011-2750Novell · 17% likely

    CWE-399Novell

13. Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attacke…CVE-2011-2667Ca · 16% likely

    CWE-119Ca

14. Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute…CVE-2011-2220Novell · 16% likely

    CWE-119Novell

15. Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vecto…CVE-2011-1511Oracle · 15% likely

    Oracle

16. Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vect…CVE-2011-2628Opera · 14% likely

    CWE-20Opera

17. libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters re…CVE-2011-2505Phpmyadmin · 13% likely

    CWE-94Phpmyadmin

18. foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.CVE-2011-2697Hp · 11% likely

    CWE-20HP

19. Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authenticati…CVE-2011-2522Samba · 11% likely

    CWE-352Samba

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.