Paypal error: Security header is not valid

This error normally happens only when you have not entered your API credentials correctly, for example if you have entered the sandbox API instead of the live API. You should retype your API Username, Password and Signature and make sure that you have correctly set "Use Paypal Sandbox" in HBook->Payments.