i been checking around and been seeing ppl been using the following ports

3389
5000 Windows XP UPNP
22 SSH, Remote Login Protocol

i know about the 5000 is the plug and play but dont understand how the exploit works, call me a n00b but could someone post tuts or something on how to exploit the above ports ? or could PM me either way would be greatful

P.S if someone is going to say go search on google, packetnews, astalavista already done it but like i said they dont explain in a way i could understand