well i would suggest using phpbb at http://www.phpbb.com the forum is free and all u do is upload it onto your server and u manage it completely. The only way someone could get to it was if they had acces to ur shell.