Two vulnerabilities have been uncovered in Microsoft's Windows Vista operating system (OS) and Internet Explorer 7 (IE7).