Likely someones installed a script that is mailing out; I highly doubt that a current version of UBB.T has been exploited to allow users to send mail (especially if said mail doesn't include the headers included FROM ubb.t).
The reason I want the headers is that it'll show if someone's using SMTP, or (a lot of the time) will include a script name.
