Using XP you're vulnerable to all those attacks that could exploit security gaps.
In other words, the malwriters have an operating system that constantly suffer from 0-day vulnerabilities, destined to remain unresolved.
So, despite the good security config, I advise you not to keep personal data on this machine but on the other you have.