I am working on a CMS site whose domain is:
http://www.acmssite.com
They have a sub-domain where they store a form system:
You can still bypass this issue with the help of YQL even though you don't have access to the header part of the receiving window. With the Postmessage method also you need to edit the recipient window script. But using this method you can load any iframe without touching their scripts. Check this out! jsfiddle-link