Maxthon (essentially a wrapper for Internet Explorer to allow tabbed browsing, plugins, etc.) can be exploited by a malicious website to read and write arbitrary local files on the machine running it.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37085/maxthon_mulvulns.txt
Source: https://packetstormsecurity.com/files/37085/maxthon_mulvulns.txt.html