This is hardly in the category of "lightweight and secure", but for impromptu stuff, this Ruby+Rack one-liner serves directory listings and static files from the current directory:
ruby -e 'require "rack"; include Rack; \
Server.start :app => Directory.new(".", \
Static.new(nil, :urls => ["/"], :root => "."))'