Running ASP.NET web sites? You need to read this security item published yesterday http://www.microsoft.com/security/incident/aspnet.mspx