We've asked Maxthon about the report and will let you know if it has a response. In its forums, the company did acknowledge that it collected info outside of UEIP, but maintained that it wasn't scooping up anything that "involves the user's privacy." That's an odd statement when history and searches are the very definition of private content. While Maxthon may not be doing anything wrong with the info it receives, there's a risk that an attacker could intercept that content and use it to learn more about potential targets. And that's no small issue when estimates suggest that there may be hundreds of millions of Maxthon users worldwide.

[Thanks, Kristy]