I don't remember right now, but there is an option (that you must tweak yourself) to prevent the execution of all scripts and executables.

The fact that this is even necessary does, to me, indicate a fundamental flaw in the system however.