** NOTE ** EDIT 29/9/2010 ASP.NET Security Update is now available. See here . EDIT 21/9/2010 : Scott Guthrie has published FAQ on the Security Vulnerability, read it here . Read his original post on the issue here . ** ** See Steve Smith's blog post