The image captcha is created in "tmp" directory. Make sure nothing is blocking access to this directory, like server settings or .htaccess rules. Some security components like Admin Tools may build rules for disallowing direct access to some directories. In that case add an exception for "tmp" directory under "Allow direct access, except .php files, to these directories".