Microsoft fixes security holes including 3 already exploited