This article indicates that there may be a whole new family of exploits about to hit the streets.
http://www.securityfocus.com/news/11477The poc is going to be shown next week at the Black Hat Security Briefings in Las Vegas - anyone on here going ?.
The annoying thing is that the exploit is built around a vulnerability in IIS5 that was notified to MS in Dec 2005 - how slack is that !