Likely to be exploited (10% or more)

Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.

1. hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demon…CVE-2009-0695Dell · 69% likely

   CWE-287Dell

2. OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote at…CVE-2011-1473Openssl · 67% likely

   CWE-264OpenSSL

3. Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting…CVE-2012-1876Microsoft · 65% likely

   CWE-94Microsoft

4. Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Prope…CVE-2012-1875Microsoft · 62% likely

   CWE-94Microsoft

5. Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a craft…CVE-2012-3815Sielcosistemi · 44% likely

   CWE-119Sielcosistemi

6. The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos befo…CVE-2012-0217Citrix · 40% likely

   CWE-119Citrix (NetScaler)

7. The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.CVE-2012-2174Ibm · 39% likely

   CWE-94IBM

8. Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary c…CVE-2012-2175Ibm · 29% likely

   CWE-119IBM

9. Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption…CVE-2012-1185Imagemagick · 28% likely

   CWE-190Imagemagick

10. Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object…CVE-2012-1874Microsoft · 24% likely

    CWE-94Microsoft

11. Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnRowsI…CVE-2012-1881Microsoft · 24% likely

    CWE-94Microsoft

12. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "ins…CVE-2012-1880Microsoft · 24% likely

    CWE-94Microsoft

13. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Tit…CVE-2012-1877Microsoft · 24% likely

    CWE-94Microsoft

14. Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Cen…CVE-2012-1523Microsoft · 22% likely

    CWE-94Microsoft

15. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnB…CVE-2012-1878Microsoft · 22% likely

    CWE-94Microsoft

16. The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attr…CVE-2012-1858Microsoft · 22% likely

    CWE-200Microsoft

17. Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (unhandled exce…CVE-2012-3794Pro-Face · 21% likely

    CWE-119Pro-Face

18. The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wind…CVE-2012-0173Microsoft · 21% likely

    CWE-94Microsoft

19. Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML…CVE-2012-1855Microsoft · 20% likely

    CWE-94Microsoft

20. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined me…CVE-2012-1879Microsoft · CVSS 8.1 · 20% likely

    CWE-94Microsoft

21. Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working d…CVE-2012-1849Microsoft · 18% likely

    Microsoft

22. Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via…CVE-2012-1873Microsoft · 18% likely

    CWE-200Microsoft

23. Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a fil…CVE-2012-3576Jquindlen · 18% likely

    CWE-264

24. Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u play…CVE-2012-0677Apple · 16% likely

    CWE-119Apple

25. Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an ex…CVE-2012-3575Rbx Gallery · 15% likely

    CWE-264

26. Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute…CVE-2012-1502Pypam · 14% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.