Hello,
there is a bug with suExec in version 4.1. On cPanel servers some cgi scripts (e. g. Counters) are storred in /usr/local/cpanel/cgi-sys and are accessible from ScriptAlias /cgi-sys. Prior version 4.1 there were being run with user permissions (suExec). In version 4.1 there are run as nobody.
