Microsoft released three critical vulnerability bulletins last week. The problems are in Commerce Server, Microsoft XML Core Services and Internet Explorer.

Commerce Server – Unchecked buffer in ISAPI filter could allow commerce server compromise. Click here to view bulletin.

Microsoft XML Core Services – XMLHTTP control can allow access to local files. Click here to view bulletin.

Internet Explorer – Incorrect VBScript handling in IE can allow web pages to read local files
Click here to view bulletin.