That wasn't CWP.
mod_security has nothing to do with that.
And the only way modules are Enabled/Disabled is if you rebuild Apache or change them manually in httpd.conf.
Which again isn't automatically done by CWP.
This looks more like a change when your phpbb updated, since that's the screen you are showing.
If you rebuilt Apache, you'll just have to go into the forementioned httpd.conf and remove the comment tag.