The error "security header is not valid" means that there is a problem with the PayPal API Username, Password and Signature you have entered.
it usually happens if you use Sand Box API Credentials but set eCart to use the live server, or vice versa.
double check that you are using the correct API information.