Likely to be exploited (10% or more)

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

1. protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows…CVE-2012-0053Apache · 82% likely

   Apache

2. Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictab…CVE-2011-4858Apache · 80% likely

   CWE-399Apache

3. Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2,…CVE-2012-0013Microsoft · 74% likely

   Microsoft

4. Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008…CVE-2012-0003Microsoft · CVSS 8.1 · 70% likely

   Microsoft

5. Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in…CVE-2011-4789Hp · 64% likely

   CWE-119HP

6. Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quan…CVE-2012-0897Irfanview · 52% likely

   CWE-119Irfanview

7. Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModul…CVE-2012-0266Ntrglobal · 42% likely

   CWE-119

8. The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filt…CVE-2011-3478Symantec · 40% likely

   CWE-287Symantec

9. A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and e…CVE-2011-4786Hp · 39% likely

   CWE-94HP

10. The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary…CVE-2012-0267Ntrglobal · 39% likely

    CWE-20

11. The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary f…CVE-2012-0393Apache · 36% likely

    CWE-264Apache

12. The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %…CVE-2012-0021Apache · 30% likely

    CWE-20Apache

13. Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…CVE-2011-4373Adobe · 30% likely

    CWE-787Adobe

14. Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via…CVE-2011-4135Flexerasoftware · 30% likely

    CWE-22Flexerasoftware

15. Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.CVE-2011-5052Cocsoft · 30% likely

    CWE-119

16. mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators…CVE-2011-4642Splunk · 29% likely

    CWE-352Splunk

17. Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might…CVE-2011-5057Apache · 27% likely

    CWE-264Apache

18. Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wi…CVE-2012-0004Microsoft · 22% likely

    Microsoft

19. Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by upload…CVE-2011-3833Sitracker · 19% likely

    Sitracker

20. The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character…CVE-2012-0007Microsoft · 19% likely

    CWE-79Microsoft

21. The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cau…CVE-2011-4619Openssl · 18% likely

    CWE-399OpenSSL

22. Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via…CVE-2012-0009Microsoft · 17% likely

    Microsoft

23. ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation…CVE-2011-3829Sitracker · 17% likely

    CWE-200Sitracker

24. Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of…CVE-2011-4109Openssl · 17% likely

    CWE-399OpenSSL

25. The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover…CVE-2011-4108Openssl · 16% likely

    CWE-310OpenSSL

26. Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privi…CVE-2010-5082Microsoft · 15% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.