On Feb 18, 11:39 am, MarkB wrote:
> After I complained to the security
> company (www.securitymetrics.com) twice via email, they finally
> replied to my complaint and told me that the site was generally cross-
> site scripting vulnerable. They gave me a couple of links which
> pointed to directories on my website

Maybe have a look at
http://msdn2.microsoft.com/en-us/library/bb355989.aspx
and at
http://msdn2.microsoft.com/en-us/library/ms998274.aspx