Sorry, I just can't remember all of the options available in vBulletin, but I don't believe there is any option to allow or disallow attached files along with private messages. Best you can do, as has been suggested, is to use the IMG tag to embed images from a file storage facility directly into your messages.
Syntax would be:
[IMG] ** photo URL ** [/IMG]
|