Microsoft late Wednesday issued patches for three security holes affecting its Point-to-Point Tunneling Protocol (PPTP), Windows 2000 platform and versions of the Internet Information Server (IIS). The Redmond, Wash.-based software giant warned that the most critical of the three bugs was an unchecked buffer in PPTP (define) implementation that could enable denial-of-service (DoS) attacks.