you need to supply more info to best help you out.
what version of plesk are you using?
how many domains on your box?
have you noticed the email flowing out to increase steadily? or all of a sudden a lot of email one day?.. (one day not many emails going out - then another day, you see a big increase - a lot more than usual)
do you have formmail on any accounts?
run command at root/su - : locate Formmail, locate FormMail and locate formmail and see if there are any formmail scripts you don't know about.
The best suggestion here, is to get a program called ISOQLOG,
http://www.enderunix.org/isoqlog/ This can help you see what all accounts are sending/receiving.
IHTH,
Peace.