I have similar experiences. 900 mails through many layers of management to find out after flying in for an on-site visit they were running our app on unpatched

I have similar experiences. 900 mails through many layers of management to find out after flying in for an on-site visit they were running our app on unpatched pre-sp1 ie6 which doesn't even support script tag injection properly.