YoVille will NEVER ask for your password, so please be wary of malicious emails and/or forum posts that request your password, including via web links.
Gary addressed this issue earlier. It is being worked on
Forum Avatar Issue
Postby Gary Stevenson ยป Fri Jun 13, 2014 4:40 pm Hey YoFans,
You may notice that your forum avatars are not being updated. This is due to a security exploit that was discovered where people could theoretically change your avatar on your behalf. We're working hard to get this issue resolved, thanks for your patience!