Adobe has widened fixes across ColdFusion, Commerce, and Campaign Classic, with seven CVEs that include authorization bypass, SQL injection, and command-injection style flaws.