Likely to be exploited (10% or more)

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data…CVE-2011-3389Google · 73% likely

   CWE-326Google

2. Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafte…CVE-2011-3492Azeotech · 71% likely

   CWE-119AzeoTech

3. Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and…CVE-2011-3322Scadatec · 65% likely

   CWE-119

4. Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in…CVE-2011-2595Acdsee · 60% likely

   CWE-119Acdsee

5. service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed metho…CVE-2011-3497Measuresoft · 57% likely

   CWE-200Measuresoft

6. WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element i…CVE-2011-3494Interactivedata · 56% likely

   CWE-119

7. Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.CVE-2011-3486Beckhoff · 50% likely

   CWE-119Beckhoff

8. Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and S…CVE-2011-1892Microsoft · 41% likely

   CWE-200Microsoft

9. Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arb…CVE-2011-3490Measuresoft · 36% likely

   CWE-119Measuresoft

10. The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.d…CVE-2011-2763Lifesize · 36% likely

    CWE-20Lifesize

11. Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified di…CVE-2011-3360Wireshark · 35% likely

    Wireshark

12. Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File For…CVE-2011-1989Microsoft · 28% likely

    CWE-20Microsoft

13. Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute…CVE-2011-1982Microsoft · 28% likely

    CWE-20Microsoft

14. Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gop…CVE-2011-3205Squid-Cache · 27% likely

    Squid-Cache

15. The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service…CVE-2011-3348Apache · 22% likely

    CWE-400Apache1 bounty report

16. Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerabili…CVE-2011-1986Microsoft · 22% likely

    CWE-399Microsoft

17. Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers…CVE-2011-3200Rsyslog · 21% likely

    CWE-119Rsyslog

18. Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office…CVE-2011-1990Microsoft · 20% likely

    CWE-119Microsoft

19. Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for M…CVE-2011-1987Microsoft · 20% likely

    CWE-119Microsoft

20. Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web…CVE-2011-1890Microsoft · 20% likely

    CWE-79Microsoft

21. Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility P…CVE-2011-1988Microsoft · 19% likely

    CWE-119Microsoft

22. Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web s…CVE-2011-0653Microsoft · 17% likely

    CWE-79Microsoft

23. Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote atta…CVE-2011-1893Microsoft · 17% likely

    CWE-79Microsoft

24. Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary…CVE-2011-1891Microsoft · 17% likely

    CWE-79Microsoft

25. Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…CVE-2011-3491Progea · 16% likely

    CWE-119Progea

26. Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP…CVE-2011-3499Progea · 15% likely

    CWE-119Progea

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.