How do I display the raw value of a CCK field securely?
Yes! Lots of security concerns. You'll want to use check_plain(), check_markup() or one of the other functions to output that securely.

Check out Writing Secure Code for more information.