The BlogEngine.NET folks have released a security update to BlogEngine. I would recommend downloading it ASAP.
Thanks to Mads for the heads up!
4/28/2008