2001 was without any doubt the year of vulnerabilities. CERT, the leading security information source (www.cert.org), documented an increase of 240 percent for reported vulnerabilities and incidents in 2001. The reality is that existing web servers such as IIS and Apache (to a lesser extent) can be easily penetrated, especially if they are not patched and configured properly. Full Story