I consider this sort of software harmful, but there is definitely an important distinction between it and software that actively tries to steal your credit card numbers, run a botnet, or send spam email. We need a word specifically for software that makes an attempt to abide by the law and avoid any outright malice, yet exists in a sort of moral gray area.
I propose "grayware."