[N3WBI3]

Two of The IIS Vulnerabilities are still out there as opposed to none of the Apache...

[Bush2000]

Two of The IIS Vulnerabilities are still out there as opposed to none of the Apache...

Nope, not according to Secunia. The only one that MS hasn't patched has to do with a cross-site scripting attack that is easily prevented by shutting down remote administration -- something that any decent admin would do by default. Nice try, though.