only once or twice… resolved with js conflict or server config… you should check with your host on mod_security or check with phpinfo() on your server… can cause all sorts of false alarms…
what happens when the profile page loads? just the blank space? you dont get the text page until you load another tab/menu, right?
so with your browser console open, what do you see for the ajax response when the initial profile page loads?