I contacted my host and they found the problem. Here’s their response:
I was able to resolve this error by disabling mod_security on the domain. Since we are unable to disable only the rule that is broken, the only solution was to disable mod_security altogether. I have tested an upload before and after disabling and it works now.