Showing it online is not an option, since it'll be determined after the form is submitted and just before the email gets sent.
Take a look at cforms.php (line 470-480 & 953-960). After this line:
$wpdb->query(substr($sql,0,-1));
you could add:
$subID = $wpdb->get_row("select LAST_INSERT_ID() as number from $wpdb->cformsdata;");
$subID = $subID->number;
Then include the submission ID in the email, change (~508 & +1045):
if ( $ccme )
$sent = @mail($field_email, stripslashes($subject2), stripslashes($message), $headers2);
else
$sent = @mail($field_email, stripslashes($subject2), stripslashes($message2), $headers2);
e.g., to:
if ( $ccme )
$sent = @mail($field_email, stripslashes($subject2).'(Submission ID:'.$subID.')', stripslashes($message), $headers2);
else
$sent = @mail($field_email, stripslashes($subject2).'(Submission ID:'.$subID.')', stripslashes($message2), $headers2);
I tested this, it works and would be how I would solve it.
Of course you could also add the ID in the tracking report. In cforms-database.php, change line 190:
<li class="col0"><?php echo $i++; ?></li>
to:
<li class="col0"><?php echo $entry->id; ?></li>
This will replace the generic counter (always starting from 0) with the actual submission ID.