Make sure you have HTML disabled and only BB code enabled.

There are a number of exploits involving HTML and Avatars excuting code to exploit the forums.

-Slats