The new ColdFusion MX updater provides the options to disable access to web services from Flash via Flash Remoting. From the release notes:
Access to webservices are disabled by default in updater 3, so if you are calling them from Flash via Flash Remoting, you will need to enabled them.
Copyright © 2015 Adobe Systems Incorporated. All rights reserved.