Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6839
http://www.securityfocus.com/bid/3018
http://www.securityfocus.com/archive/1/196452