There are several ColdFusion tags that are disabled:

  • ColdFusion 4.5 and 5.0
    CFRegistry
    CFAdminSecurity
  • ColdFusion MX and MX 7
    CFRegistry
    CFExecute
    CFObject (can be enabled per customer request)
  • ColdFusion 8
    CFRegistry
    CFExecute

All other tags are enabled.