System.Data.SqlClient.SqlException was unhandled by user code

  Class=15
  ErrorCode=-2146232060
  LineNumber=1
  Message="Incorrect syntax near '12'."
  Number=102
  Procedure=""
  Server="\\.\pipe\4256CD37-CD38-4F\tsql\query"
  Source=".Net SqlClient Data Provider"
  State=1
  StackTrace:
       at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
       at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
       at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
       at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
       at System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName, Boolean async)
       at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
       at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
       at admin_regester.Button1_Click(Object sender, EventArgs e) in C:\Documents and Settings\Smart Solutions\My Documents\Visual Studio 2005\WebSites\websms\admin\regester.aspx.vb:line 69
       at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
       at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
       at System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)
       at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
       at System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)
       at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

  account = "'" + TextBox11.Text + "'"
        username = "'" + TextBox1.Text + "'"
        password = "'" + TextBox2.Text + "'"

        firstname = "'" + TextBox4.Text + "'"
        lastname = "'" + TextBox5.Text + "'"
        age = TextBox6.Text
        gender = "'" + DropDownList2.SelectedValue + "'"
        country = "'" + DropDownList1.SelectedValue + "'"
        city = "'" + TextBox7.Text + "'"
        mobile = TextBox8.Text
        company = "'" + TextBox9.Text + "'"
        email = "'" + TextBox10.Text + "'"
        dat = Date.Now



        Dim str2 As String = "insert into [profile_td](account_id,user_name,first_name,last_name,country,city" + _
                                       ",date,mobile_no,company,age,gender,email)values  " + _
              "(" + account + "," + username + "," + firstname + "," + lastname + "," + country + "," + _
              city + "," + dat + "," + mobile + "," + company + "," + age + "," + gender + "," + email + ")"

        Dim cn2 As New SqlConnection
        cn2.ConnectionString = ConfigurationManager.ConnectionStrings("sms.mdf").ConnectionString
        cn2.Open()
        Dim cmd2 As New SqlCommand(str2, cn2)
        MsgBox(str2)
        cmd2.ExecuteNonQuery()
        cmd2.Dispose()
        cn2.Close()

dat = Date.Now

dat = Date.Now.ToString("MM/dd/yyyy")

INSERT INTO Table1
                      (da)
VALUES     (CONVERT(DATETIME, '2006-01-14 15:35:00', 102))

CONVERT ( data_type [ ( length ) ] , expression [ , style ] )

102 ANSI yy.mm.dd
103 British/French dd/mm/yy
104 German dd.mm.yy
105 Italian dd-mm-yy