Thanks for the tips, folks. I figured out what happened. The CGI module uses a null string (\0) to separate values in multi-valued parameters. Those nulls where choking the email program. Replacing the null strings with another separator fixed the problem.