You can attach 2 devices to 1 IDE channel, so if you already have 1 CDROM device and 2 HDDs, you have space for exactly one more.
But since you are actually willing to by a separate controller, go ahead. Performance wise it would be better and you will have room for future expansion.