(The) faxsurvey CGI script security exploit has just been published on the squid-users mailing list; it might be a good idea to disable this script.