Microsoft's security team acknowledged Tuesday that it knew of bugs in its Jet Database Engine as far bask as 2005 but did not patch the problems because it thought it had blocked the obvious attack vector.

Microsoft admits it knew about, but didn't patch, bugs