Thanks for the file, I think I can spot the source of the issues you are experiencing.
First for the id that you are using in the order I think you are referencing the id that is inserted into the details table. Instead of using ts08usa_OrderID in the email you should try to use Session.SessionID like this:
Change line 79 from this:
79: MailBody = MailBody & Session("ts08usa_OrderID")
To this
79: MailBody = MailBody & cStr(Session.SessionID)
Then for the credit card number not showing I think this is because of the value that is being referenced. You are using the session value for this, but all of the other server behaviors on the page are using the posted values. To update this change line 265 like this:
265: If Len(Session("eCartCheckoutForm_cc_number")) < 4 Then Response.Write(Session("eCartCheckoutForm_cc_number")) Else Response.Write(Right(Session("eCartCheckoutForm_cc_number"),4)) End If
To this:
265: If Len(Request.Form("cc_number")) < 4 Then Response.Write(Request.Form("cc_number")) Else Response.Write(Right(Request.Form("cc_number"),4)) End If
Please give these updates a try and let us know how it works for you.