The group that hacked us a week ago did another SQL scan yesterday. I don't think they found anything, as thats the same scan they used when they cracked the first server. And we haven't put anything new in yet. But I could be wrong.

In other news, I did find a couple of MSDE installations mission a particular MS patch, but that isn't one that is remotely exploitable if you don't already have a login. Still, it needs to get patched.