No weakness recorded

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

1. Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName param…CVE-2002-0772Hosting Controller · 9.2% likely
2. browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.CVE-2002-0775Hosting Controller · 8.3% likely
3. Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for U…CVE-2005-1784Hosting Controller · 5.6% likely
4. imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters s…CVE-2002-0773Hosting Controller · 4.5% likely
5. Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via…CVE-2002-0465Hosting Controller · 4.0% likely
6. Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter.CVE-2005-2077Hosting Controller · 3.6% likely
7. Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter t…CVE-2004-1217Hosting Controller · 2.9% likely
8. Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.CVE-2002-0774Hosting Controller · 2.7% likely
9. Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change rese…CVE-2006-3147Hosting Controller · 2.7% likely
10. Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in argument…CVE-2002-0464Hosting Controller · 2.3% likely
11. admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modif…CVE-2006-1620Hosting Controller · 2.2% likely
12. SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.CVE-2005-1788Hosting Controller · 2.1% likely
13. Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbit…CVE-2006-6814Hosting Controller · 2.1% likely
14. Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) ser…CVE-2002-0466Hosting Controller · 2.0% likely
15. Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp…CVE-2005-2219Hosting Controller · 1.9% likely
16. SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the prov…CVE-2006-1229Hosting Controller · 1.9% likely
17. Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action…CVE-2006-5630Hosting Controller · 1.8% likely
18. SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add acti…CVE-2006-0581Hosting Controller · 1.8% likely
19. getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed…CVE-2002-0776Hosting Controller · 1.8% likely
20. Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such a…CVE-2006-1764Hosting Controller · 1.6% likely
21. The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existe…CVE-2002-0212Hosting Controller · 1.6% likely
22. Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuot…CVE-2005-0694Hosting Controller · 1.5% likely
23. Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to "the PHP vulnerability."CVE-2005-3038Hosting Controller · 1.4% likely
24. The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a…CVE-2005-0695Hosting Controller · 1.4% likely
25. Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolu…CVE-2006-1621Hosting Controller · 1.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.