[Obligatory] Foxit / Evince mention
Whenever I set up a new machine or tend to a friend's broken one I install Foxit Reader (for Windows or Linux). The "Safe Reading" box is checked by default and this eliminates scripting inside pdfs. (On installation, I take care to uncheck the Ask toolbar box)
Evince for GNOME is another favourite.