Yeah I got to the bottom of it in the end. The $_SERVER['REQUEST_URI'] is reported incorrectly on IIS7 systems set up with FastCGI. It returns the page filename but not the query string at the end.
vBulletin have been informed, but as its not a fault at their end, I doubt they'll do any patches for it.