If it were me I would disable mod_security and restart/reload the service and see if that 'fixes the issue'.
If it does then you would take a look at the mod_security rules. Figure out which rule is preventing ajax calls and disable the rule. Or more secure, write a rule to allow ajax calls. I haven't played with mod_security very much so