Possible (1 to 10%)

Every one of the 217 is a mark on the map. Named now: 1 to 26, most at risk first.

1. setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows…CVE-2011-2506Phpmyadmin · 9.6% likely

   CWE-94Phpmyadmin

2. Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME record…CVE-2011-2465Isc · 8.9% likely

   Isc

3. Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other produ…CVE-2011-1741Emc · 8.2% likely

   CWE-119Emc

4. Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to caus…CVE-2011-2516Apache · 7.7% likely

   CWE-189Apache

5. TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information,…CVE-2011-2963Progea · 7.6% likely

   CWE-287Progea

6. Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.CVE-2011-2685Libreoffice · 7.0% likely

   CWE-119Libreoffice

7. Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remo…CVE-2011-29597t · 6.9% likely

   CWE-1197t

8. AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shut…CVE-2011-2956Azeotech · 6.7% likely

   CWE-287AzeoTech

9. Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows…CVE-2011-1498Apache · 6.7% likely

   CWE-200Apache

10. Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…CVE-2011-0241Apple · 6.5% likely

    CWE-119Apple

11. Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a c…CVE-2011-2961Sunwayland · 6.5% likely

    CWE-119

12. Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote a…CVE-2011-0226Freetype · 6.3% likely

    CWE-189Freetype

13. Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticate…CVE-2011-2694Samba · 6.0% likely

    CWE-79Samba

14. The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2…CVE-2011-1265Bluetooth · 5.9% likely

    CWE-94Bluetooth

15. SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL…CVE-2011-2688Mod Authnz External Project · 5.7% likely

    CWE-89

16. JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers t…CVE-2011-1331Justsystems · 5.6% likely

    CWE-119Justsystems

17. Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.CVE-2011-1336Estsoft · 5.5% likely

    CWE-119Estsoft

18. Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SR…CVE-2011-2641Opera · 5.4% likely

    CWE-399Opera

19. Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gat…CVE-2011-0548Symantec · 5.1% likely

    CWE-119Symantec

20. Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application…CVE-2011-0216Apple · 5.0% likely

    CWE-189Apple

21. foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a…CVE-2011-2964Linuxfoundation · 5.0% likely

    CWE-94Linuxfoundation

22. ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allo…CVE-2011-2608Hp · 4.8% likely

    CWE-20HP

23. Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio…CVE-2011-2696Mega-Nerd · 4.6% likely

    CWE-119Mega-Nerd

24. chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before…CVE-2011-2535Digium · 4.6% likely

    CWE-20Digium

25. Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly exec…CVE-2011-2962Invensys · 4.6% likely

    CWE-119Invensys

26. ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service…CVE-2011-0215Apple · 4.5% likely

    CWE-20Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.