Official MT hack response.
Movabletype have issued an official response to the spam bug which echos what most people have said – delete mt-send-entry.cgi but they also provide a fixed version in case this file is needed (which it isn’t on default installations)
