Some sites I have been a member of in the past don't go through the normal "Forgot Password?" process. Instead of e-mailing me a unique password reset link or something of the like, I have received the password in my e-mail in plain text.
I would imagine that to make this possible, the password would have to be stored in plain text somewhere in the database. Is this necessarily true?