Storing the database password: We want to read Oracle data via a VB.NET function that we call with CallVB. Where do we put the user ID and password?

You can put the login credentials into your VB.NET program, but use an encrypted format so that the password cannot easily be read in the compiled .NET programs. .NET offers suitable encryption libraries for this purpose.