According to port 80 (by way of Scoble, in the top 1000 corporations, IIS use stands at 53%. No wonder there are so many security issues. Apache is hardly invulnerable, but it sure seems to have fewer issues than IIS.