Microsoft has released a Security Update for Commerce Sever 2000
A security vulnerability exists in Commerce Server 2000 that could allow remote code execution. This update resolves that vulnerability.Security Update for Commerce Sever 2000 (KB941305)