NSS Security Bulletins Vulnerabilities found in PHP. Multiple security holes have been discovered in PHP, a scripting language used in web applications. If you use PHP on your web server, contact your vendor for a patch. For more information, see http://www.cert.org/advisories/CA-2002-05.html NSS Security Bulletins Microsoft has released the Microsoft Baseline Security Analyzer (MBSA), a free, 2.5MB tool that will scan for vulnerabilities and missing patches. MBSA generates a report card for each system scanned and offers instructions for downloading fixes. To download, go to http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/Tools/mbsahome.asp