It is actually only listed as important since a user would actually have to visit a .doc file for the vulnerability to be exploited. But if they did it would allow someone to run programs on the machine. This is the main one we are currently trying to script.
MS03-035