Windows XP SP3 omits critical security update
A Windows XP security update released in November 2006 that fixed five Flash vulnerabilities was inadvertently omitted from Windows XP Service Pack 3. This isn't a big deal because running Microsoft Update after installing SP3 applies the missing update. I just wanted to mention this to emphasize the importance of running Microsoft Updates even after installing the latest and greatest Windows service pack.
InfoWorld: Windows XP SP3 omits critical security update
InfoWorld: Windows XP SP3 omits critical security update