I don't remember right now, but there is an option (that you must tweak yourself) to prevent the execution of all scripts and executables.
The fact that this is even necessary does, to me, indicate a fundamental flaw in the system however.
"He who fights with monsters might take care lest he thereby become a monster. And if you gaze for long into an abyss, the abyss gazes also into you." - Friedrich Nietzsche