Developers at fault? SQL Injection attacks lead to wide-spread
compromise of IIS servers | Zero Day | ZDNet.com
http://blogs.zdnet.com/security/?p=1059