Likely to be exploited (10% or more)

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

1. phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_…CVE-2012-5159Phpmyadmin · 75% likely

   CWE-94Phpmyadmin

2. Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced…CVE-2012-0209Horde · 72% likely

   CWE-94Horde

3. Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a lon…CVE-2012-4876Trendnet · 71% likely

   CWE-119Trendnet

4. The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum paramete…CVE-2012-4869Sangoma · 70% likely

   CWE-94Sangoma

5. file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) cha…CVE-2012-2982Gentoo · 62% likely

   Gentoo

6. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.CVE-2012-3259Hp · 60% likely

   HP

7. Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name paramete…CVE-2011-5171Cyberlink · 46% likely

   CWE-119Cyberlink

8. Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitra…CVE-2012-0419Novell · 42% likely

   CWE-22Novell

9. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.CVE-2012-3261Hp · 40% likely

   HP

10. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.CVE-2012-3260Hp · 40% likely

    HP

11. Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav…CVE-2011-5165Cleanersoft · 37% likely

    CWE-119

12. Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long p…CVE-2012-4924Asus · 36% likely

    CWE-119ASUS

13. ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (asse…CVE-2012-4244Isc · 35% likely

    Isc

14. Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via…CVE-2012-2288Emc · 33% likely

    CWE-134Emc

15. Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.CVE-2011-5170Castillobueno · 32% likely

    CWE-119

16. The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for…CVE-2012-3137Oracle · 31% likely

    CWE-287Oracle

17. Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute…CVE-2012-5002Ricoh · 31% likely

    CWE-119Ricoh

18. Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command resp…CVE-2011-5164Vandyke · 29% likely

    CWE-119Van Dyke Technologies

19. The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8…CVE-2012-2897Google · CVSS 7.8 · 22% likely

    CWE-119Google

20. ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IP…CVE-2012-3955Isc · 22% likely

    Isc

21. file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary f…CVE-2012-2983Gentoo · 20% likely

    CWE-287Gentoo

22. Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, ak…CVE-2012-2546Microsoft · 20% likely

    CWE-399Microsoft

23. Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that…CVE-2012-1529Microsoft · 20% likely

    CWE-399Microsoft

24. Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted…CVE-2012-2557Microsoft · 19% likely

    CWE-399Microsoft

25. Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, ak…CVE-2012-2548Microsoft · 19% likely

    CWE-399Microsoft

26. Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.CVE-2012-4992Flashfxp · 18% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.