Fixed instances of hexchat_printf that unsafely used a string parameter as a format string.

Fixes #1153