That's because of the phpIDS security settings which are included with D7.
When you enter the admin panel, I think it's located in the advanced settings, possibly other, don't remember off-hand which. There's a link that you can open up with several checks in order to enable or disable certain items. About midway down there's a place for security impact and security threshold. I kept bumping up the numbers but no matter how high I went (got up to 40), I still kept getting those security errors. According to the phpIDS website anything over 15 could be construed as a potential hacker attack. Finally I disabled those two items with a negative one -1 which not only stopped those messages but simultaneously also corrected several site issues that we were experiencing.
According to our server admin the phpIDS settings are not "desireable" if you already have your own root server with various security measures and firewalls in place. Definitely made a heck of a difference for us (turning phpIDS off).