>>One person, which he knows the mail-paths at these scripts <<

That doesn't make a difference. The path to sendmail is one of the most commonly known paths on a *nix server.

Secondly he can't send spam through sendmail without having access to your server.

The only way he can do it is if you are using the smtp option and your server is insecure and allows relaying.

I'd email your host.