I think it's up to the speaker. I've heard it without the "and" more often, but certainly enough times with the "and" that it wouldn't make me take notice of something unusual. I've also heard "twenty-oh-eight." That one still does strike me as unusual, but not wrong.
As a matter of style, I can't think of why you would ever want to write out the year in words. Just write 2008.