Irwin nailed it! Salesforce’s Clickjack Protection prevents any standard Salesforce page from being used in an iFrame, and I believe that as of a more recent release they made it impossible to disable this from the Session Settings panel without contacting Salesforce support directly.
