Privacy settings cookies

I have a shopping cart app that fails to work in IE 6 on PC. If I change the privacy settings to low - allow all cookies then it works. but i cannot expect users to change their settings just to use my site.

I think the offending bit of asp is: cstr(Session(“customerOrderID”))