Legacy-code should always give you deep paranoia. It goes with the territory. Make each change as you find them, one at a time, taking care to bracket them or to tag them in your change-control system. If you find that you need to make such a change, let it be a source-control "commit" of its very own.