Hotfix and Security Update List: Windows Server 2008 SP2 and Windows Vista SP2
Not sure if anyone has seen this, but yesterday, Microsoft posted the full list of all Hotfixes (QFEs) and Security updates that have been rolled into Vista SP2. The list can be downloaded from the Microsoft Download Center at http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d8b2cf4b-a2df-4664-8dd8-e840001e33f3.
For IIS, you will want to look under the Server Technologies, although unfortunately, there isn't a way to just filter for IIS QFEs.