VarScoper, open up source, by Mike Schierberl. A var scope checking tool that can help recognize in which you're building area variables in CFCs without the need of var scoping themIf you're looking for cover versus vulnerabilities identified by these kinds of testing applications, see many sorts of Stability/Protection Resources that are cataloged