windows update doesn't plug the swiss cheese... it's more geared towards the OS vs. add-ons. They've got a separate tool that'll let you check to see if IIS has all the latest hotfixes applied (similar to up2date, apt get, etc).
You can get it from
here .