Microsoft has released a cumulative patch for Internet Information Server (IIS) 4.0, Internet Information Services (IIS) 5.0, and IIS 5.1. This patch includes the functionality of all security patches that have been released for IIS 4.0 since Windows NT 4.0 Service Pack 6a (SP6a), all security patches that have been released for IIS 5.0 since Windows 2000 Service Pack 2 (SP2), and all security patches that have been released for IIS 5.1
Download: Windows NT 4.0 Security Patch: Internet Information Services 4.0 Security Fix
Download: Windows XP Security Patch: Internet Information Services 5.1 Security Fix
Download: Windows XP 64-Bit Edition Security Patch: Internet Information Services 5.1 Security Fix