Ah, another issue I've seen in the past is with custom forms. A system admin I know created a custom cash sale entry form and his quantity field was sourced from the wrong place, so it was always one. But, it could also be a rouge script or workflow.