Mon. 7th March, 2005
Unless the default encryption key settings have been changed by the administrator, the TYPO3 mailform can be compromised to send mail to a wrong receipient. Thus, spam mails may be sent from a remote site.
This is a companion discussion topic for the original entry at https://typo3.org/article/typo3-security-bulletin-34/