security question

Hi,
I’m considering installing WordPress on my server and creating other blogs
for use by other users.
Are there any security concerns I should be aware of? It looks like WordPress uses PHP tags to mark up the pages. Can users call regular PHP functions? Can they access the database, access local files, or do other privileged functions from the web templates?
Thanks, WILL