Power CMS may have been hacked

I designed a site about a year ago that includes Power CMS and was just informed by the company hosting the site that it was hacked. Apparently the hackers were able to upload scripts that were sending out thousands of emails from the site and the hosting company thinks they were able to do it through the content management system. Any ideas on what this may have been or how I should go about taking care of it?

What version of Power CMS is used on this site? In your order history, i see you have Power CMS 1. If you used this version on the site, there is a known issue post in the download center about this problem.

go yo your account, in the download section go to all my downloads and go to the Power CMS 1 download page.

Sorry, I said Power CMS and I meant Power CMS Builder in Design Extender. It's Design Extender 1.1.5. Should I still use the configuration.php file that I downloaded from the Power CMS 1 download page?

No, Power CMS builder will contain the security fix.

The only way that sPower CMS builder could have been hacked, is if they guessed your admin username and password. make sure to use a strong username and password for the super admin on you site.

Isn't is possible that hackers can have access to your admin and password through the internet, unless your site is completely secured by an SSL? This is a concern I have about the PowerCMS Builder in Dreamweaver.

Not unless you publish that information out on the internet.

the possibility of hackers having your CMS Admin login information is the same as any other web site login.

Use a good strong username and password and don't publicly share that information and it should be good.

I plan to publish the CMS admin pages for a client so that they can edit content on their browser on their own computer. When they enter their admin and password through a browser, it will travel through their server to the host server unsecured, and leave their website open for the possibility of someone seeing that information and hacking into their account. Have I missed something?.. as I believe unless those pages are https, that information would be unsecured.

Yes, to secure the transmission of the password information to the host server, you should use SSL.