You can use nessus to scan for common CGI vulnerabilities. On packetstormsecurity.org are a lot of CGI related tools. Use with care.