Yes, usually only the host can change those. You can ask them to check the logs for mod_security violations and amend the rules, or turn off mod_security for the site.
You can also ask if they have updated PHP lately, and ask them to roll back the update -- that could also be a cause.
Keep this in mind in case they are not responsive:
http://bobsguides.com/modx-friendly-hosts.html
