Here is where you can contact Symantec with feedback on any of their products:

https://secure1.symantec.com/discuss...oduct+feedback

And if you really have found a security hole, then informing them of it should be enough reward in itself, knowing that you have done some good for the Internet community as a whole.