Microsoft Source Code Analyzer for SQL Injection (CTP July 2008)