Hello YakMan!
First of all, please, update your 5.0.12 version to the latest 5.0.14 or even try to work with 5.1.1 beta with included responsive design based on Bootstrap and LESS and fulfillment statuses:
http://www.x-cart.com/downloadxc5beta
Here is the info about this beta:
http://blog.x-cart.com/5-0-13-plus-5-1-0-beta.html
Regrading the CAPTCHA feature. I strongly do not recommend to use this feature, since it decrease the real customer conversation. There are a lot of examples of CAPTCHAs which pick off real customers. That's why the XC5 core team will not develop this module.
I like what Mike said. Human test or honeypot is much better solution. There are 3d-party professional services (like
http://akismet.com/) to stop SPAM and I believe that such integration is right way.