A vulnerability in the Opera 7.x series allows phishing attacks due to not updating the address bar if a web page is opened using the window.open function and then replaced using the location.replace function.
2b64c28e854d3abd60765551937f3f7fd6835b5e59e4664a7233b171d8bbb4de