http://www.theregister.co.uk/2005/01/28/mysql_worm/
I think it was this one - but it only affects Windows - is CF hosted on Windows?
[Edit] beat me to it!
__________________
If not already thought of, a warning e-mail to all registered users might be an idea?