Could you post somewhere your .htaccess, httpd.conf (unlikely), error.log and a detailed recursive listing of your web dir?
I'd curious about the restriction to cgi-bin. What exactly is supposed to be achieved by that?