You can do AJAX without any XMLHttpRequest object. Instead, you can use an other data transportation pattern: dynamically loaded javascript thanks to the 'script' tag and its 'src' attribute. This transportation pattern is usually associated with the JSON format (even though you can wrap XML as well) and it is sometimes considered as more powerfull than the XMLHTTPRequest object since it allows AJAX applications to perform cross-domain requests. Some service providers such as Google or Yahoo use this pattern thus making it possible to establish connections to their servers inside your AJAX application.
There are tones of articles that tackle this subject on the internet. Google is your friend.