There is a really scary article in the Wall Street Journal about a back door in Microsoft’s web servers software. With the right password, and a specific server configuration (Frontpage 97 extensions installed, I believe), you are pretty much in controol

I provided a link to Slashdot, because the online WSJ requires a paid account.