this is microsofts way of handling things:
"don't say anything about security holes in your system until you can't any longer deny it"

that's not the "best" way of working with your clients but it's micosofts way and if you would have some million $ you would do it the same way ...

------------------------------------------------------------------------------------------------------------------------
"Knowledge is the real power"