Heh... setuid craziness. That's kind of scary.

Here's a nice super-quick audit that you might want to run:

find `perl -e 'print join(" ",split/:/,$ENV{PATH})'` -type f -perm -40
+00 -uid 0 2>/dev/null
[download]

Of course, in order to be a complete audit, though, you'd have to iterate over /, instead of just over $PATH.