The Flash Player is particular (for security reasons) about loading XML data if it originates from a domain that's "different" than the one your SWF is loaded under. This not only applies to domains that are completely different, but domains that are requested with or without "www" at the beginning.
To fix this, you need to add a cross domain policy file to your web site. Instructions available here.