CVE-2005-0905: Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar vi...

Security readout for executives and security teams

A malicious website could read potentially sensitive text from the search bar in Maxthon 1.2.0. This is an old browser-specific information disclosure issue, not a server compromise. Business urgency depends almost entirely on whether this legacy browser version is still present in the environment. Exposure is likely limited to endpoints still running Maxthon 1.2.0. Modern standard enterprise browsers are not identified as affected in the supplied sources. The provided affected-product metadata is incomplete, so validate using software inventory rather than assumptions. Low unless Maxthon 1.2.0 is found in use. If present, retire it promptly because unsupported legacy browsers create broader security risk beyond this single information disclosure issue. Mitigation focus: Inventory endpoints for Maxthon 1.2.0 or unsupported Maxthon builds.; Remove or replace affected legacy browser installations where found.; Check Maxthon or archived vendor guidance for any named fixed version..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.