fejl i opdaterings kode

i koden:

<%
if session("bruger") = "" then
Response.Write "Du er ikke logget ind <a href='login.asp'>Log ind</a>"
else
Set Conn = Server.CreateObject("ADODB.Connection")
DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; "
DSN = DSN & "DBQ=" & Server.MapPath("System.mdb")
Conn.Open DSN

strSQL = "Select * From Brugere Where Bruger = '" & session("bruger") & "'"
set rs = Conn.Execute(strSQL)

Kon = rs("Kon")
Oprettet = rs("Oprettet")
Profil = rs("Profil")
By = rs("Bynavn")

if Request.QueryString("ret") = "profil" then
strSQL = "Update Brugere set "
strSQL = strSQL & "Profil= '" & Request.Form("profil") & "' "
strSQL = strSQL & " Where Bruger = " & session("bruger")
Conn.Execute(strSQL)  <<<<<<<<<<< linje 29
end if


%>
<form method="post" action="retprofil.asp?ret=profil">
  <b>Facts:</b><br>
<%
Response.Write "Køn: " & Kon & "<br>"
Response.Write "Oprettet: " & Oprettet & "<br>"
Response.Write "Du bor i: " & By & "<br>"
%> 
<p>
    <textarea rows="5" cols="50" name="profil"><%Response.Write Profil%></textarea>
    <br>
    <input type="submit" value="opdater">
    <input type="reset" value="slet det tilføjede">
  </p>
</form>
<%
end if
Conn.Close
Set Conn = Nothing
%>

får jeg fejlen:
Microsoft OLE DB Provider for ODBC Drivers (0x80040E10)
[Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 1.
/lær Asp/tutorial/systemer/System/retprofil.asp, line 29