What about passwords? Have you set up strong passwords for your database?

The ASP page writes to the database with a username and password. Have you made it something other than sa? (For MS SQL)