Likely to be exploited (10% or more)

Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…CVE-2011-3026Google · 73% likely

   CWE-190Google

2. Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows…CVE-2012-1195Landesk · 69% likely

   CWE-264Landesk

3. Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Co…CVE-2012-0155Microsoft · 65% likely

   CWE-94Microsoft

4. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows re…CVE-2012-0500Oracle · 58% likely

   Oracle

5. Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastNam…CVE-2012-1006Apache · 57% likely

   CWE-79Apache

6. Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary…CVE-2012-1196Landesk · 51% likely

   CWE-22Landesk

7. tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which all…CVE-2012-0840Apache · 42% likely

   CWE-20Apache

8. Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attac…CVE-2011-3659Mozilla · 37% likely

   CWE-416Mozilla

9. Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-exam…CVE-2012-1007Apache · 33% likely

   CWE-79Apache

10. The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, relat…CVE-2012-0830Php · 30% likely

    CWE-399PHP

11. Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows rem…CVE-2012-0014Microsoft · CVSS 7.8 · 28% likely

    CWE-94Microsoft

12. Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTM…CVE-2012-0011Microsoft · 27% likely

    CWE-94Microsoft

13. PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL…CVE-2012-1205Alanft · 25% likely

    CWE-94

14. Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code…CVE-2012-0150Microsoft · 24% likely

    CWE-119Microsoft

15. Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a craft…CVE-2012-0015Microsoft · 23% likely

    CWE-94Microsoft

16. Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attribute…CVE-2012-0020Microsoft · 20% likely

    CWE-94Microsoft

17. Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attribute…CVE-2012-0019Microsoft · 20% likely

    CWE-94Microsoft

18. Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attribute…CVE-2012-0138Microsoft · 20% likely

    CWE-94Microsoft

19. Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attribute…CVE-2012-0137Microsoft · 20% likely

    CWE-94Microsoft

20. Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attribute…CVE-2012-0136Microsoft · 20% likely

    CWE-94Microsoft

21. webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592.CVE-2011-4041Broadwin · 18% likely

    CWE-94

22. Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attac…CVE-2012-0145Microsoft · 17% likely

    CWE-79Microsoft

23. Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attacke…CVE-2012-0144Microsoft · 17% likely

    CWE-79Microsoft

24. Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via J…CVE-2012-0017Microsoft · 17% likely

    CWE-79Microsoft

25. Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory…CVE-2012-0012Microsoft · 16% likely

    CWE-665Microsoft

26. Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Reques…CVE-2010-4562Microsoft · 14% likely

    CWE-200Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.