Microsoft has recently been informed of a security vulnerability in ASP.NET and they have a fix for it. Please see ScottGu’s blog post for details: http://weblogs.asp.net/scot... In addition to providing a work-around for developers, they also have a script to run on the server to find non-compliant Web sites. Joe ......