I'm still investigating/experimenting myself, but if I understand properly what I've read so far, you can change that to:
SSLCipherSuite HIGH+DH:MEDIUM+DH:!ADH:!MD5
to require PFS. I'm not sure how many browsers that'll break (I have doubts about broad coverage for Safari/Opera/IE).