Robin Hood is the best HTTP server for the BeOS. It's easier to set up than Apache, and handles CGI, PHP, SSL, custom 404s, redirects, and virtual hosts, none of which are handled by Be's bundled server, PoorMan. It's open source under the GPL and will be the bundled web server in the next version of BeOS.

Edit: There will be no "next version" of BeOS. However, Robin Hood may be included in OpenBeOS, or an OpenBeOS-compatible version may be made available.

The current version available at www.bebits.com has several exploits (I won't tell you what they are) but Be's in-house version, which runs under the closed-beta BSD-type network stack (BONE) has them fixed. You can also get a patched version for the net_server at Bebits, just remember it's unofficial.