Email spoofing in [email protected]

Hey, I've found *email spoofing* vulnerability in [email protected] Issue: ======== When I try to send a fake email from [email protected] is is an issue; because, fake mails should be sent into the 'spam' folder.

<?php
$to = "[email protected]";
$subject = "test by ahsan";
$txt = "testing";
$headers = "From: [email protected]";
mail($to,$subject,$txt,$headers);
?>