If I'm reading the changelogs right, that $MAIL bug was fixed in 1.7.4. Not sure when the PATH one was fixed; I run with secure path everywhere. Maybe try a recent version and see if that helps.