There are mod_security fixes all over the 'net, but I spent some time figuring out today that if you're running mod_security2, the per-directory .htaccess trick doesn't work - mod_security2 doesn't support per-domain/directory overrides.
Solution in the Apache forum [webmasterworld.com] because it really is an Apache fix . . . .
