Created attachment 227645 [details]
If a spammer adds something in the URL field then it is not possible to clear that out completely. The field can be wiped out, but the spam content is still present in the history. It can be shown and it is probably visible to search crawlers.
Please see the screenshot if my description is not clear enough.
*** This bug has been marked as a duplicate of bug 257826 ***