If you haven't hit the Windows Update button yet today, you should. The updates come one week after Microsoft was forced to rush an emergency Windows patch, when attackers began exploiting a bug in the way Windows processes .ani animated cursor files. In addition to the Content Management Server update, Microsoft fixed critical flaws in the Windows Client Server Run-Time Subsystem, Microsoft Agent and Plug and Play services. In total, the new patches fix seven critical flaws, five of which are in Windows. A fifth update fixes a less-critical flaw in the Windows kernel. All three of the critical Windows patches should be installed as quickly as possible, security vendors said Tuesday.

CRITICAL
- MS07-017 - Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
- MS07-018 - Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)
- MS07-019 - Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)
- MS07-020 - Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168)
- MS07-021 - Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)

IMPORTANT
- MS07-022 - Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)

MISCELANOUS
- April 2007 Security Releases ISO Image
- Windows Malicious Software Removal Tool
- Update for Windows Mail Junk E-mail Filter [April 2007] (KB905866)  
- Update for Windows Mail Junk E-mail Filter for x64-based Systems [April 2007] (KB905866)  
- Update for Windows Vista (KB932637)  /improve the translation quality of the Czech version of Windows Vista