TechNet has just launched a site that lets you search through existing security bulletins based on criteria such as patch severity, affected products, etc. One of the niftiest parts is that it lets you search on patches that haven't been superseded by a later patch.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/current.asp