in reply to MIME::Lite and CGI
see the perlsec manpage (this section in particular). you haven't untainted $ENV{PATH}.
anders pearson