We are getting TONS of spam comments, mostly on one product. We have reviews enabled and there IS a captcha. i tested and i can't submit a review without the captch, so how is the spam happening?
Are you using the old captcha or the new one? If using the old, disable it and install the Simtech addon that gives you the new captcha on older cs-carts.