Someone logged in to the machine likely has enough access to make this attack irrelevant.
Although for the good stuff you want POST. With POST and an error-tolerant SMTP server you can send mail, I imagine other kinds of servers might be equally accommodating.