Security patching on SQL Server 2005 SP4

I have a SQL Server 2005 instance at Service Pack 4 (Build 9.00.5000.00) and have questions about these 2 security patches.

• MS11-049 (KB2494120)
• MS12-070 (KB2716429)

Will applying MS12-070 (KB2716429) include MS11-049 (KB2494120)?

And if this instance is not running Reporting Services, do I need to apply MS12-070 (KB2716429) or would it do any harm?

And yes, I know this is a very old instance...don't ask.

Thanks for any information