http://www.nessus.org/

Has several CGI specific tests built in.