From the "for what it's worth" department...

I've gotten into many a discussion over Unix vs. NT web servers. The truth is, the track record for Internet Information Server (IIS) hasn't been great.

News: IT bugs out over IIS security

And add this to the list of reported bugs:

News: Web at risk from new MS flaw

Not to forget the patch you need to fix the problem:

Microsoft Bulletins