Security test of customer portal page

We have a customer portal page that has been custom designed which allows customers to view the status of present orders and look up some details from past order history. I need someone experienced with discovering website security vulnerabilities to go over the page to determine if there are any remotely exploitable security problems with the login pages or exposed web server software. Initial testing should include tests for common (Microsoft) SQL injection techniques and IIS bugs and configuration flaws. Any flaws found need to be documented with sufficient detail or example that I can give it to the programmer to be fixed. At this stage, only the login pages will be put under test. A separate test for the pages available once authenticated to the system will be available after this initial evaluation of the login system.