An example application in ColdFusion Server 4.0 allows remote malicious users to view source code via the sourcewindow.cfm file.
allaire coldfusion server 4.0