If they have register globals on with all there severs that seems odd. Maybe they are using a older version of php which could potentially be the cause of other Vulnerabilities. But that wouldn't make sense that they wouldn't just turn it off. Or possibly something with their setup in particular the software they run is an older script that requires register globals on. I don't know hspere that well, last time I checked that's what they were running. Or maybe their billing/automation script requires see more this. It does seem kind of odd that a fairly large host like ixwebhosting hasn't had other problems related to register globals on and made some adjustments.