Check available, not yet exploited

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. Apache Struts2 S2-053 - Remote Code ExecutionCVE-2017-12611Apache Software Foundation · 87% likely

   CWE-20Apache

2. Netsweeper - Authentication BypassCVE-2014-9618Netsweeper · 73% likely

   CWE-287Netsweeper

3. Intelbras WRN 150 - Authentication BypassCVE-2017-14942Intelbras · 61% likely

   CWE-552Intelbras

4. Joomla! Helpdesk Pro plugin <1.4.0 - Local File InclusionCVE-2015-4074Helpdesk Pro Project · 57% likely

   CWE-22Helpdesk Pro Project

5. Node.js <8.6.0 - Directory TraversalCVE-2017-14849Nodejs · 54% likely

   CWE-22Node.js

6. Django Debug Page - Cross-Site ScriptingCVE-2017-12794Djangoproject · 24% likely

   CWE-79Djangoproject1 bounty report

7. OpenDreambox 2.0.0 - Remote Code ExecutionCVE-2017-14135Dreambox · 22% likely

   CWE-78

8. Fortinet FortiOS < 5.6.0 - Cross-Site ScriptingCVE-2017-3133Fortinet, Inc. · 11% likely

   CWE-79Fortinet

9. Fortinet FortiOS < 5.6.0 - Cross-Site ScriptingCVE-2017-3132Fortinet, Inc. · 8.1% likely

   CWE-79Fortinet

10. FortiOS 5.4.0 to 5.6.0 - Cross-Site ScriptingCVE-2017-3131Fortinet, Inc. · 7.7% likely

    CWE-79Fortinet

11. Xsuite <=2.4.4.5 - Open RedirectCVE-2015-4668Xceedium · 6.7% likely

    CWE-601Xceedium

12. WSO2 Data Analytics Server 3.1.0 - Cross-Site ScriptingCVE-2017-14651Wso2 · 3.8% likely

    CWE-79WSO21 bounty report

13. SourceBans <2.0 - Cross-Site ScriptingCVE-2015-8349Gameconnect · 3.3% likely

    CWE-79

14. OpenText Documentum Administrator 7.2.0180.0055 - Open RedirectCVE-2017-14524Opentext · 2.9% likely

    CWE-601OpenText

15. WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site ScriptingCVE-2017-146222kblater · 2.9% likely

    CWE-79

16. WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSSCVE-2015-8350Inboundnow · 2.6% likely

    CWE-79

17. WordPress < 4.8.2 - Authenticated Open RedirectCVE-2017-14725Wordpress · 2.2% likely

    CWE-601WordPress

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.