If you have secure login turned on then the edit profile page will be served up as HTTPS.

This works fine if you don't have a user image but gives errors in IE7 since you are calling the user image via HTTP.

The IE7 error is "This page contains both secure and nonsecure items. Do you wish to display the nonsecure items?"

If you say 'no' then the page loads without the user image. Interestingly, it fails completely if you say yes, for reasons I don't understand.