Report vuln for apache_mod_cgi_bash_env

Now with fewer false positives! It's kinda like a check method.
update to use vmware-vmx-stats
Improve false positive check
re-add quotes -oops
Add protip to description

This gets you lots of shells.
Add missed mixin
remove debugging
Fix missed var
Fix typo in description

Running on fumes here...
Land #3885, @mubix's improvements to vmware root.

This prevents the need to kill any processes before getting root
privs, which is a good timesaver.
Reimplement old check code I was testing before

I would like to credit @wchen-r7 for providing advice and feedback.

@jvazquez-r7, too! :)
Favor check_host for a scanner
Fix description to be less lulzy
Land #3884, @wvu's check and reporting for apache_mod_cgi_bash_env