Monday morning I was greeted with about 80 emails from webmaster to myself. I was excited to see what I had written to myself! Needless to say it was all spam!
I made a few changes in Cpanel and they have all gone away. I decided to set it so that company email can only come from our companies IP address. So then here is my number 2 change that I will make when I become "web security czar", you should NEVER allow email to be sent without first logging in! Number 1 would be to BAN JAVA!