The Security Log entry shows that what is being blocked is the /panoramas/ URI|Query string in the /uploads folder by BPS Pro UAEG. Do this BPS Pro troubleshooting step below and test things and let me know if that works. If that works then I will post the UAEG whitelist rule that you need to allow/whitelist this. It is possible that you may need to add an additional whitelisting rule in the root htaccess file too because the Query String is simulating a common RFI hacking attempt against your website:
http://forum.ait-pro.com/forums/topic/read-me-first-pro/#bps-pro-general-troubleshooting
5. On the Security Modes page, select the Deactivate UAEG BulletProof Mode Radio button and click the Activate|Deactivate button.