Description
The __VIEWSTATE parameter is not encrypted for one or more pages. To reduce the chance of someone intercepting the information stored in the ViewState, it is good design to encrypt the ViewState.
Remediation
Turn on the encryption mode for the view state. Consult web references for more information, taking into consideration ASP.NET version