Update: It turned out to be an issue with mod_security on my web host (Namecheap). Unfortunately, I couldn’t get the information as to which precise rule was being triggered, but the support person whitelisted the rule, and the e-mail creation now seems to be working.