MS IIS web administration multiple bugs

Crossite scripting, unauthorized access to few configuration pages...