You should not be able to view the source of a cgi script, as normally the cgi script is held outside of the web root. Thus the only way to actually view the source of a cgi script is to expolit a vulnerability within the web server (If any exist). Which web server is the script on?

SittingDuck