Microsoft Source Code Analyzer for SQL Injection: Called MSCASI, this is a static code analysis tool that identifies SQL Injection vulnerabilities in ASP code (ASP pages are the ones that have ...

Static analysis tools don't find new types of vulnerabilities on their own; they can only catch things based on the rules they've been directed to follow.