cvstunnel is a wrapper around cvs(1) that tunnels all the cvs traffic through an ssh tunnel.
The process is as transparent as possible and all options are handed down to cvs.
You can download cvstunnel or read the documentation.