A remote user can alter the Admin Password for the Subscribe Me Admin Control Panel allowing a user to add and remove ppl from the list as well as initiate a mailling with a message body of their choice.