Yep, I was able to follow. A couple of checks for read permissions to subforums. The fix can easily bust cfrm if not done right , so only attempt this if you really need the subforum fix.
Edit scripts/cfrm.inc.php. About line 327 you'll see this
foreach($subforums[$Keyword] as $k => $v) {
Right after that, add this:
if (!isset($userob->access[$v]['read']) || $userob->access[$v]['read'] == 0) {
continue;
}
Then about line 355, you'll find this:
foreach($tree['kids'][$Keyword] as $k => $sub_id) {
Right after that, add this:
if (!isset($userob->access[$sub_id]['read']) || $userob->access[$sub_id]['read'] == 0) {
continue;
}