If a site can email you your password, they are basically storing it in clear text. Otherwise they could not send you your password (because they would only have the hash of it). This is clearly a huge security risk.