There is an important Security Patch for ColdFusion MX and JRun available today. It patches the Web services framework, and you need it if you have Web Services that are publicly accessible.