Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.
https://exchange.xforce.ibmcloud.com/vulnerabilities/68452
http://www.opera.com/docs/changelogs/windows/1110/