Had a strange issue this morning. A site I work on that uses Contact Form 7 had it's email cut off because it had sent out over 150 emails within the hour. I spent some time on chat with the support team, strangely the email address it was sending FROM was the "default" mailbox on the server - the mail that it was going TO was not the ones specified in the one and only form that was set up to use Contact Form 7. Still, they felt the script that was doing this was coming from the contact form. I disabled the plugin and removed the files - and suddenly the emails stopped.
I realize that a number of other things could be going on here - but I'm just wondering if anyone else has experienced a similar problem. I'm wondering if it's possible that there's some kind of security issue with this plugin...?