IIS is typically prone to viruses and worms more so than any other web server. I would advise against it for home use -- use it only when behind a tightly controlled firewall and when software components specifically require IIS over other alternatives (such as Apache on win32, or better yet, on Linux/BSD).