If stats are accurate, then most probably you encounter problem with http://sqlinthewild.co.za/index.php/2007/11/27/parameter-sniffing/%5B/url%5D