The avatar permissions for all the usergroups are very likely wrong. I noticed that the VB set the default to not allow anyone to change it, but I didn't have time to fix it yesterday.