During the weekend I discovered an XSS issue with the Advanced Poll module. I've made sure to provide a patch and submit this to the issue queue.
I have actually submitted a few other SAs in the past, one of them was for the nice_dash module, which aims to provide a dashboard interface for Drupal administrators, but unfortunately it wasn't yet commited.
Drupal Security Advistory - XSS vulnerability in Advanced Poll module versions 6.x-3.x and prior
Project: Advanced Poll (third-party module)
Version: 6.x-3.x and earlier
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting
Advanced Poll 6.x-3.x and all prior versions
Apply the patch
Liran Tal <email@example.com>