Also, even if the domain's pagerank is legitimate, a lot of expired domains lose their pagerank pretty quickly.
Sites fake PR by looking for the Googlebot, then redirecting it to a high PR site, like Yahoo.com. Google sees that users actually land on Yahoo.com and the PR Bar in turn reflects the PR of the Yahoo.com rather than your site.