On a related note: http://www.troyhunt.com/2012/07/heres-why-we-keep-getting-hacked-clear.html

Send to your boss if you still use ASP.

Send to your developers if they don't know about that stuff.