Microsoft has issued a security bulletin addressing ten vulnerabilities in IIS versions 4 through 5.1. Three of these holes are marked as critical – they range from remote buffer overflows to denial of service and cross-site-scripting.

We highly recommend all IIS administrators download this immediately since exploits are already available for several of these vulnerabilities.