You can use an Electrum instance by restoring from your Master Public Key and have
http://acceptbit.com/ set to create receiving addresses for payments.
Then have the Electrum client with the seed in another PC, away from hackers that want to get into your precious server which only has an Electrum instance.
Problem with that is the Acceptbit doesn't have an API (as least back when I looked at it it didn't), so it's hard to work with. If someone could write a simple address generator that just takes in a master public key it would be nice (I might end up doing that myself at some point).