Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.
http://www.opera.com/support/kb/view/1042/
http://www.opera.com/docs/changelogs/unified/1213/
http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html