Remember that it's only really an exploit if it is abused, otherwise it is just harmless code.
That's a very Microsoft way of looking at things.
"
It's not a bug until a few thousand servers get taken off the internet, costing millions of pounds worth of damages. THEN we might create a patch" - Microsoft bugfix motto.
