Allen Jones tells you about two vulnerabilities in SQL Server 7.0 and the patches to correct them as well as the continuing problems with .htr extensions.