This is an exploit in a lot of contact form scripts. If it's php have a look at:
http://www.securephpwiki.com/index.php/Email_Injection
It explains it quite detailed
http://www.securephpwiki.com/index.php/Email_Injection
It explains it quite detailed
