You can also keep an eye out when looting/trading to see if you can find something with a Pickpocket bonus. IIRC I found an amulet with Pickpocket +1, and bought a ring from Kistandalius to get to level 2. Unless you tell the third person you gave away the only two cures, I don't think there is a time limit on the quest.