Possible (1 to 10%)

Every one of the 196 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load stru…CVE-2012-0001Microsoft · 9.2% likely

   Microsoft

2. wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whet…CVE-2011-4898Wordpress · 9.2% likely

   CWE-200WordPress

3. wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remot…CVE-2011-4899Wordpress · 9.0% likely

   WordPress

4. Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// co…CVE-2011-4905Apache · 8.5% likely

   CWE-399Apache

5. Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted cont…CVE-2011-4531Siemens · 8.4% likely

   CWE-20Siemens

6. The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures agai…CVE-2011-1184Apache · 8.2% likely

   CWE-264Apache

7. OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate co…CVE-2011-4577Openssl · 8.2% likely

   CWE-399OpenSSL

8. Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allow…CVE-2012-0389Mailenable · 8.1% likely

   CWE-79Mailenable

9. PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in t…CVE-2012-0934Zingiri · 8.1% likely

   CWE-94

10. Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (…CVE-2011-4643Splunk · 7.7% likely

    CWE-22Splunk

11. wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which al…CVE-2012-0937Wordpress · 7.6% likely

    WordPress

12. Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication,…CVE-2011-4644Splunk · 7.5% likely

    CWE-287Splunk

13. The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow re…CVE-2011-5062Apache · 7.4% likely

    CWE-264Apache

14. HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different…CVE-2012-0697Hp · 7.0% likely

    CWE-22HP

15. Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _li…CVE-2011-4529Siemens · 6.9% likely

    CWE-119Siemens

16. Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rat…CVE-2011-1389Ibm · 6.8% likely

    CWE-22IBM

17. The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow…CVE-2011-5063Apache · 6.5% likely

    CWE-287Apache

18. DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as th…CVE-2011-5064Apache · 6.3% likely

    CWE-310Apache

19. Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attacke…CVE-2011-3375Apache · 6.3% likely

    CWE-200Apache

20. Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption…CVE-2011-4371Adobe · 6.2% likely

    CWE-787Adobe

21. Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…CVE-2011-4370Adobe · 6.2% likely

    CWE-787Adobe

22. Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via t…CVE-2012-0895Tom Braider · 5.3% likely

    CWE-79

23. Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedde…CVE-2012-0192Ibm · 5.1% likely

    CWE-189IBM

24. Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain craf…CVE-2011-4057Wibu · 4.9% likely

    CWE-399Wibu

25. Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.CVE-2011-4788Hp · 4.9% likely

    CWE-22HP

26. Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP se…CVE-2012-0929Schneider-Electric · 4.8% likely

    CWE-119Schneider Electric

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.