Last time I checked system() was deprecated in that it uses /bin/sh -c and is a security risk due to set(u|g)id privilege escalation and environment manipulation attacks.

There's a good case that spawning a shell to execute a command is not a good idea (as shamrock noted) if a simple exec will suffice.