Exploited in the wild

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. Apache Struts 2 - Remote Command ExecutionCVE-2017-5638Apache Software Foundation · CVSS 9.8 · 100% likelycovered by CyberSIXT

   CWE-755Apache3 bounty reports1 article

2. Windows Server 2003 & IIS 6.0 - Remote Code ExecutionCVE-2017-7269Microsoft · CVSS 9.8 · 100% likely

   CWE-120MicrosoftBlackTech

3. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0147Microsoft Corporation · CVSS 7.5 · 100% likely

   Microsoft

4. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0148Microsoft Corporation · CVSS 8.1 · 99% likely

   CWE-20Microsoft

5. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0144Microsoft Corporation · CVSS 8.8 · 99% likelycovered by CyberSIXT

   Microsoft

6. Cisco IOS 12.2(55)SE11 - Remote Code ExecutionCVE-2017-3881Cisco · CVSS 9.8 · 99% likely

   CWE-20Cisco

7. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0143Microsoft Corporation · CVSS 8.8 · 93% likely

   Microsoft

8. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0146Microsoft Corporation · CVSS 8.8 · 90% likely

   Microsoft

9. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0145Microsoft Corporation · CVSS 8.8 · 90% likely

   Microsoft

10. dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_na…CVE-2017-6334NETGEAR · CVSS 8.8 · 73% likely

    CWE-78NETGEAR

11. Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disc…CVE-2017-0059Microsoft Corporation · CVSS 4.3 · 62% likely

    Microsoft

12. The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows…CVE-2017-0101Microsoft Corporation · CVSS 7.8 · 57% likely

    CWE-119Microsoft

13. fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.CVE-2014-3931Looking Glass · CVSS 9.8 · 29% likely

    CWE-119Looking Glass1 bounty report

14. Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Ex…CVE-2017-0149Microsoft Corporation · CVSS 8.8 · 28% likely

    CWE-787Microsoft

15. Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold an…CVE-2017-0022Microsoft Corporation · CVSS 6.5 · 18% likely

    CWE-119Microsoft

16. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1…CVE-2017-0005Microsoft Corporation · CVSS 7.8 · 11% likely

    MicrosoftAPT31

17. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1…CVE-2017-0001Microsoft Corporation · CVSS 7.8 · 3.1% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.