A better penance might be to rewrite MW's formmail.pl so that it's secure.

Like Not Matt's Scripts?