FireFox 3.5.1 has a vulnerability:

http://isc.sans.org/diary.html?storyid=6829&rss

There is no patch yet

Although Javascript access can be restricted with applications such as the NoScript Add-On, it may still be possible for the browser to be exploited if an untrusted website is loaded