A patch to fix a URL vulnerability in CFMX 7 - 7.02 that allows directory listings was recently released by Adobe. The vulnerability is only when running CF on Windows - the patch is available at
http://www.adobe.com/support/security/bulletins/apsb07-02.html.