cgi-wrap.c allows you to execute CGI scripts under a special UID/GID in a chroot environment. Unlike suexec, it does not execute arbitrary (user-)scripts but only programs which are installed and configured by the system administrator. This allows you to remove some restrictions of suexec without lowering security.
