Hi Andrew,
We use SQL here and not Access. But for both, to do a parameterized query requires code. That's why we developed our DBXL Web service back in 2004 - to help people integrate their forms with SharePoint and SQL. Free trial and it's cheap.
But, you could also write the code yourself and give it the correct permissions (full trust required in some cases). Another idea would be to move the Access data to SharePoint and use Owssvr or BCS to pull it down.
Let me know if you want a quick demo. This is like 5 minutes to show how to do with our DBXL web service.