Microsoft's July patches merely 'important,' but watch out for the non-security fixes too

Stephen Withers
Wednesday, 09 July 2008 08:24

Business IT - Technology

The fourth and final bulletin concerns Outlook Web Access for Exchange Server 2003 and 2007. A pair of privately reported cross-site scripting vulnerabilities could be exploited to allow a script to perform actions such as sending or deleting emails as if it was the logged-in user.

As usual, Microsoft has also updated the Malicious Software Removal Tool and the Windows Mail junk email filter.

But the list of updates doesn't stop there, with additional items being pushed out through Windows Update.

Non-security updates allow the production use of Hyper-V virtualisation software with Server 2008; fix a VBScript/JScript bug in Server 2008, Vista and XP; provide better performance and reliability with Vista; and update the English and German dictionaries of Server 2008 and Vista.