You can use a library like Xdomain or EasyXDM to get an alternative to CORS by hacking a mail message.
I prefer to use Xdomain because it captures its own XMLHTTPRequest and provides a drop-in solution. EasyXDM forces you to use their APIs, which means more overhead for conditional coding, however it does support IE6 / IE7.
Chief take away? Do not stop supporting CORS! Just make IE act and abandon the future.
source share