>The IIS issue may be a great point, but VFP ain't IIS and there are no CodeRed-like worries with VFP!

Why not? There are times when security risks in VFP itself can be threatening, or security risks exclusive to my product can be threatening, in both cases, I think that Full Disclosure would be as bad as it is with IIS.