On the confirm.asp page under the server behavior 'eCart Store Summary in Database' the Order ID is being stored as ts08USA_OrderID, isn't that the same as <%=Session("ts08usa_OrderID")%> as used in Universal Email?
Also, the last 4 digits of the credit card are not appearing, it just shows up as xxxx xxxx xxxx