The Flicks Titan application firewall for IIS has a vulnerability in the url inspection allowing it to be easily bypassed.