There is no inherent limit to the number of STA threads you can have, however you will probably want to impose such a limit on your own.
If you allow your ASP.NET application to create additional STA threads as new user requests arrive, without limiting it, eventually the number of threads will cause your application's performance to deteriorate as the amount of time spent by the CPU on context switching becomes too high. This also makes your application much more vulnerable to denial of service attacks.
You can consider a design were you set a limit for the number of STA threads based on your hardware or users profile, and once the limit is reached, implement some pooling to re-use existing STA threads to service new requests.