Yes on timthumb …Here is what the host said:
sounds like a permission issue..they also recently had a DDoS on the server….
The module for the wordpress application you are mentioning in your latest reply is not familiar to us. Thus if the module has some requirements you should provide us with them so we can check if the module is compatible with the shared hosting environment on which your account is located.
However since this is a module for the wordpress application we can assume that it is using the application requirements which are compatible with the environment.
Regarding your inquiry for the mod_security this apache was enabled for the environment on which your account relies but we have disabled it.
Thanks for your reply Ipstenu….