Likely to be exploited (10% or more)

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute…CVE-2012-3274Hp · 64% likely

   CWE-119HP

2. Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute…CVE-2012-5932Microfocus · 63% likely

   CWE-94Micro Focus

3. Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a ..…CVE-2012-4347Symantec · 59% likely

   CWE-22Symantec

4. Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.CVE-2012-0432Microfocus · 59% likely

   CWE-119Micro Focus

5. Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.CVE-2012-5691Realnetworks · 53% likely

   CWE-119Realnetworks

6. freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c…CVE-2012-6066Freesshd · 40% likely

   CWE-287Freesshd

7. The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-s…CVE-2012-5975Ssh · 36% likely

   CWE-287Ssh

8. MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative…CVE-2012-5613Mariadb · 32% likely

   CWE-16Mariadb

9. Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted obj…CVE-2012-4782Microsoft · 26% likely

   CWE-399Microsoft

10. The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8…CVE-2012-4786Microsoft · 24% likely

    CWE-94Microsoft

11. Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x bef…CVE-2012-5611Mariadb · 24% likely

    CWE-119Mariadb

12. The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/…CVE-2012-5469Phpmyadmin · 24% likely

    CWE-264Phpmyadmin

13. Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denia…CVE-2012-5643Squid-Cache · 23% likely

    CWE-20Squid-Cache

14. Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2,…CVE-2012-1537Microsoft · 23% likely

    CWE-119Microsoft

15. Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a…CVE-2012-5612Mariadb · 21% likely

    CWE-787Mariadb

16. Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute…CVE-2012-4774Microsoft · 21% likely

    CWE-94Microsoft

17. The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,…CVE-2012-2556Microsoft · 21% likely

    CWE-94Microsoft

18. Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted…CVE-2012-4781Microsoft · 18% likely

    CWE-94Microsoft

19. Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object tha…CVE-2012-4787Microsoft · CVSS 9 · 18% likely

    CWE-416Microsoft

20. The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/…CVE-2012-6422Meizu · 15% likely

    CWE-264

21. Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different ti…CVE-2012-5615Mariadb · 15% likely

    CWE-200Mariadb

22. Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted…CVE-2012-4791Microsoft · 13% likely

    CWE-94Microsoft

23. Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld cra…CVE-2012-5614Oracle · 13% likely

    Oracle

24. The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart req…CVE-2012-4528Trustwave · 12% likely

    Trustwave

25. org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-con…CVE-2012-3546Apache · 12% likely

    CWE-264Apache

26. VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags tw…CVE-2011-2730Springsource · 12% likely

    CWE-16Springsource

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.