10.50

DATE	CVE	VULNERABILITY TITLE	RISK
2009-09-18	CVE-2009-3266	Cross-Site Scripting vulnerability in Opera Browser Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content." network opera CWE-79	4.3
2007-01-29	CVE-2006-6955	Improper Input Validation vulnerability in Opera Browser Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723. network opera CWE-20	4.3