They usually work as expected.
Not even that, I'm afraid. I grabbed the form mailer a while ago, because I needed one fast and I thought I could just patch the major security holes. As it turns out, I have nearly completely rewritten it, because it wasn't even SMTP compliant, and many newish servers won't accept non-compliant SMTP clients. (My server won't)
Worse though, I had some web designer hand me a script that required CGI-LIB. I hadn't even heard of cgi-lib until I looked it up. It had it's time, but it's time to bury it and move on.
I didn't believe in evil until I dated it.