ViewState
value is specific to a page in a session. If user go to other page values will be no longer.
SessionState
value is specific to user specific data that can be accessed across all pages in the web application. If another user want to access this data he will not.