osCommerce Online Merchant v2.2 RC2a has bug where one can send out spam through

http://domain.com/admin/mail.php/login.php

The proposed fix for oscmax is:

http://www.oscmax.com/forums/oscmax-v1-7-discussion/20994-spam-through-admin-mail-php-login-php-action-send_email_to_user.html

The fix in OscMax is:

http://code.google.com/p/oscmax2/source/detail?r=169

Also what is going on with these files here:

http://www.oscmax.com/blog/michael_s/security_notice_oscmax_204_released

ezOSC 3.1 (b2b) with Drop Ship / Multi-Vendor Capability

Benefits Include:

• Positive Cash-Flow
• No Inventory
• No trips to the post office
• Saving Office / Warehouse / Storage space
• Being able to spend money on Marketing and not Product
• Provide a More Competitive Price

Features Include:

• Specific Shipping Per. Vendor
• Order Automation
• Import Vendor Catalog
• and more!

Drop shipping / multi-vendor support is available in our business 2 business version of ezOSC 3.1.  ezOSC  is based on osCommerce.  If you would like to drop ship or update your current osCommerce shopping cart for drop shipping capability, please contact us.