If at first you, er, make things worse, you're probably Microsoft: Bug patch needed patching

VBScript hole 'fixed' in May actually left open for months

A remote code execution vulnerability in the Windows VBScript engine was left open for exploitation for two months after it was supposedly patched."