I found at least two (#15284 #15285) libraries shipped by pidgin, in addition to the GTK bundle (#14571) that appear to be very old and likely contain known vulnerabilities.

I hacked up a quick dump of the libraries and their apparent compile date. Some of the things I've put in bold appears dangerously old - though basically everything in this list not from pidgin/libpurple seems dangerously old:

exchndl.dll Time/Date Mon Mar 15 20:03:18 2010 Time/Date stamp 4b9ef4f6 freebl3.dll Time/Date Sun Feb 28 15:44:10 2010 Time/Date stamp 4b8affca libjabber.dll Time/Date Fri Jul 6 09:22:55 2012 Time/Date stamp 4ff70f58 libmeanwhile-1.dll Time/Date Tue Dec 9 17:05:10 2008 Time/Date stamp 4924d12b libnspr4.dll Time/Date Sun Feb 28 15:40:25 2010 Time/Date stamp 4b8afee9 liboscar.dll Time/Date Fri Jul 6 09:22:55 2012 Time/Date stamp 4ff70f9f libplc4.dll Time/Date Sun Feb 28 15:40:29 2010 Time/Date stamp 4b8afeed libplds4.dll Time/Date Sun Feb 28 15:40:26 2010 Time/Date stamp 4b8afeea libpurple.dll Time/Date Fri Jul 6 09:22:56 2012 Time/Date stamp 4ff70f1a '''libsasl.dll Time/Date Thu Sep 13 16:02:21 2007 Time/Date stamp 46e9c17d''' '''libsilc-1-1-2.dll Time/Date Tue Dec 2 20:51:36 2008 Time/Date stamp 49361057''' '''libsilcclient-1-1-2.dll Time/Date Tue Dec 2 20:51:55 2008 Time/Date stamp 4936106b''' '''libxml2-2.dll Time/Date Mon Sep 14 09:05:21 2009 Time/Date stamp 4aae69c1''' libymsg.dll Time/Date Fri Jul 6 09:22:56 2012 Time/Date stamp 4ff70fb9 '''nss3.dll Time/Date Sun Feb 28 15:45:49 2010 Time/Date stamp 4b8b002d''' '''nssckbi.dll Time/Date Sun Feb 28 15:46:28 2010 Time/Date stamp 4b8b0054''' '''nssutil3.dll Time/Date Sun Feb 28 15:42:06 2010 Time/Date stamp 4b8aff4e''' pidgin.dll Time/Date Fri Jul 6 09:22:56 2012 Time/Date stamp 4ff7104d smime3.dll Time/Date Sun Feb 28 15:46:15 2010 Time/Date stamp 4b8b0047 softokn3.dll Time/Date Sun Feb 28 15:44:17 2010 Time/Date stamp 4b8affd1 sqlite3.dll Time/Date Sun Feb 28 15:42:00 2010 Time/Date stamp 4b8aff48 '''ssl3.dll Time/Date Sun Feb 28 15:46:02 2010 Time/Date stamp 4b8b003a '''}}}