I don't think the IIS patches are part of the Windows updates. There is a tool that checks for applied hot fixes and writes in the event log if they are not current. It's called HFCHECK. It does not show up in some searches of Microsoft but you should find it at http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24168.
Two other URL's that might be of interest are: A guide to securing IIS 5.0
http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechnol/iis/deploy/depovg/securiis.asp
and the more general secuity page:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/security/default.asp

John
>It looks like a good starting point.
>
>Thanks,
>
>Paul
>
>>>Hi,
>>>
>>>I'm trying to find a page on the MS technet site that shows all the hot-fixes that have been issued by MS after the release of Windows NT Server 4.0 sp6a. I hope it would include the fixes to IIS. This would give me a complete list of fixes to install on my internet server.
>>>
>>>Any seen a compiled list from MS??
>>
>>Have you tried http://windowsupdate.microsoft.com ?