These are the ones I use. Note you only need the latest Cumulative Security Update. If you look in the KB article it will tell you if a patch replaces another patch. For XP SP3 IE 7 MS07-050 (IE7-WindowsXP-KB938127-x86-ENU.exe) patch shows that it replaces MS08-045 (IE7-WindowsXP-KB953838-x86-ENU.exe), MS08-045 replaced MS08-031 (IE7-WindowsXP-KB950759-x86-ENU.exe), MS08-031 replaced MS08-024 (IE7-WindowsXP-KB947864-x86-ENU.exe). MS07-050 : Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127) IE7-WindowsXP-KB938127-x86-ENU.exe http://www.microsoft.com/technet/security/...n/MS07-050.mspx MS08-058 : Cumulative Security Update for Internet Explorer (956390) IE7-WindowsXP-KB956390-x86-ENU.exe http://www.microsoft.com/technet/security/...n/ms08-058.mspx You may also want to install the following. When you use Remote Desktop Connection to connect to a terminal server, PNG images do not appear in Internet Explorer 7 during that RDP session http://support.microsoft.com/kb/935560 Print queue shows incorrect number of pages when you print a Web page in Internet Explorer 6 or Internet Explorer 7 http://support.microsoft.com/kb/889333