Public IM Connectivity users can send spam over IM to a Communicator Web Access user even if the PIC users are not in the CWA user's contacts list

Public IM Connectivity (PIC) users can send spam over IM to a Communicator Web Access (CWA) user even if PIC users are not in the CWA user's contacts list.

Communicator Web Access does not block PIC users who are not in the contacts list.

To resolve this problem, apply the following update: This update blocks PIC users from sending spam over IM by adding public IM users to a blocked container. CWA users can explicitly add a PIC user to a non-blocked container category so that they can receive instant messages from specific PIC users with whom they want to communicate.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.