Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1932
http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/