Bugtraq mailing list archives
Other flags may be vulnerable as well. Microsoft has a thing for unicode.
By Date By Thread