It’s been over a decade since I ran a forum but I recall phpBB specifically being chock full of security holes, probably more so than even Wordpress. If you didn’t stay on top of keeping it up to date you’d get hit with exploit-wielding bots that would cram your little forum full of spam designed to exploit Google’s ranking algorithms.