MS05-35 Vulnerability in Microsoft Word Could Allow Remote Code Execution (903672)
MS05-36 Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)
MS05-37 Vulnerability in JView Profiler Could Allow Remote Code Execution (903235)

Basically these boil down to a problem in libpng, the opensource parsing library for processing PNG image files. Microsofts a little late patching this as most Linux distro's fixed it two weeks ago. There's been know exploits for this on Windows for one week..

Enjoy.