User registered with no email

[HellmeT Creed]

How can a user register without an email address and be able to post spam?

[blind-eddie]

That can only happen if you do not require unique email address and email verification at registration.
Go into your ACP/vBulletin Options/User Registration Options
Check the box to Verify Email address in Registration and Require Unique Email Addresses