MyBB 1.6?

"A lot of sites run 1.6, why are they okay to run it?"
Because they probably have good developers which have fixed all the previous security holes and upgraded the whole system.