Thanks, but I tried that before.
And I tried both, by setting UTF-8 in the administrator as well as the way you suggest in your post #3 <cfset setEncoding("form", "UTF-8")> in the cfm.
It actually makes it even worse. Not only are the Hex 00 converted to Hex 20, but also after some other binary data an additional byte is inserted.