This tends to happen sometimes; a webhost installs everything on the server and leaves it there; thinking "well I'm secure, everyone else is fine, so it has to be this guy", why do they do this you ask? They oversell the server, they don't want to maintain it (as it runs "properly" (IE isn't crashing) and they don't upgrade things they had to pay for (like their Control Panel) because they don't feel like dipping into their "profits" to do upkeep to protect their users.
IMO, if you have the misfortune to run into one of these shady operations, you should go elsewhere.