Your file permissions are messed up; files need to be 644, folders 755. Right now some of the files are set at 777, which is a security risk and so the server blocks them to help remove some of the more basic injection methods hackers use to compromise websites.