You can disable the directory/file browsing when using the Adobe ColdFusion built-in web server by following the directions in this
article.
Note for Adobe ColdFusion 8 the correct path is
cf_root\runtime\servers\coldfusion\SERVER-INF\default-web.xml