Estoy recibiendo este error:"ErrorExecuteReader: Connection property has not been initialized"

No puedo averiguar cuál es el problema.

Imports System.Boolean
Imports System.Data.SqlClient

Public Class Form1

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        Dim userID As String
        Dim password As String
        Dim conn As SqlConnection
        Dim cmd As SqlCommand
        Dim reader As SqlDataReader

        userID = txtuser.Text
        password = txtpassword.Text
        txtuser.Text = Focus()
        txtpassword.Visible = "False"

        Try
            conn = New SqlConnection("Data Source=XXXXXX;Initial Catalog=XXXXXXUser ID=XXXXXX;Password=XXXXXX")
            cmd = New SqlCommand("Select user,password from userlog where user='" + userID + "' & password='" + password + "'")

            conn.Open()
            reader = cmd.ExecuteReader()

            conn.Close()    

            If (String.Compare(password, 123) = 0) Then
                MsgBox("Success")
            End If
        Catch ex As Exception
            MsgBox("Error" + ex.Message())
        End Try
    End Sub
End Class