class.upload.php is a powerful and mature PHP class to manage uploaded files, and manipulate images in many ways. The script is available under a GPL license.
I'm afraid that you will have to ask your hosting company for some help. It is possible that they've wrongly configured their server. Maybe the suid set on user accounts...
By listing, I meant the log.