Microsoft has released a Security Update for Commerce Sever 2000
>> Security Update for Commerce Sever 2000 (KB941305)
A security vulnerability exists in Commerce Server 2000 that could allow remote code execution. This update resolves that vulnerability.
>> Security Update for Commerce Sever 2000 (KB941305)