Noted here:

WPAD trouble - CVE-2007-1692
- http://isc.sans.org/diary.html?storyid=2517
Last Updated: 2007-03-26 23:33:28 UTC …(Version: 2)

> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1692

- http://support.microsoft.com/kb/934864
Last Review: March 24, 2007
Revision: 1.0
"…If an entity can surreptitiously register a WPAD entry in DNS or in WINS, and this entry resolves to a host with a malicious Wpad.dat file, WPAD clients may be able to route their Internet traffic through a malicious proxy server…"

:ph34r: