Opera acknowledges security flaw