Likely to be exploited (10% or more)

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,…CVE-2012-1851Microsoft · 66% likely

   CWE-134Microsoft

2. Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow…CVE-2012-4333Samsung · 60% likely

   CWE-119Samsung

3. The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.CVE-2012-4177Ubi · 58% likely

   CWE-78

4. Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary co…CVE-2011-5124Bluecoat · 55% likely

   CWE-119Bluecoat

5. lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sec…CVE-2012-4361Hp · 48% likely

   CWE-78HP

6. Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption)…CVE-2012-4157Adobe · 46% likely

   CWE-119Adobe

7. Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH s…CVE-2012-3579Symantec · 40% likely

   CWE-264Symantec

8. dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in th…CVE-2011-5130Haudenschilt · 37% likely

   CWE-94Haudenschilt

9. Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 all…CVE-2010-5193Viscomsoft · 32% likely

   CWE-119

10. Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified v…CVE-2012-1525Adobe · 32% likely

    CWE-119Adobe

11. An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet…CVE-2012-4598Mcafee · 29% likely

    Mcafee

12. Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to exec…CVE-2012-1853Microsoft · 29% likely

    CWE-119Microsoft

13. Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers…CVE-2012-1852Microsoft · 29% likely

    CWE-119Microsoft

14. The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows S…CVE-2012-1850Microsoft · 27% likely

    CWE-20Microsoft

15. Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files…CVE-2012-4356Sielcosistemi · 27% likely

    CWE-22Sielcosistemi

16. The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code b…CVE-2012-2526Microsoft · 25% likely

    CWE-94Microsoft

17. Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code…CVE-2012-4353Sielcosistemi · 25% likely

    CWE-119Sielcosistemi

18. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual functi…CVE-2012-2522Microsoft · 25% likely

    CWE-94Microsoft

19. Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer…CVE-2012-1888Microsoft · 24% likely

    CWE-119Microsoft

20. Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4…CVE-2012-2687Apache · 23% likely

    CWE-79Apache

21. Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incor…CVE-2012-2523Microsoft · 22% likely

    CWE-189Microsoft

22. Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asy…CVE-2012-2521Microsoft · 21% likely

    CWE-94Microsoft

23. Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics M…CVE-2012-2524Microsoft · 20% likely

    CWE-119Microsoft

24. Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers…CVE-2012-3456Calligra · 20% likely

    CWE-119

25. Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not ini…CVE-2012-1526Microsoft · 20% likely

    CWE-119Microsoft

26. The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC addre…CVE-2012-4330Samsung · 14% likely

    CWE-119Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.