You're absolutely correct, but in evite's case they are storing them permanently...

ardell on Feb 28, 2009 | parent | context | favorite | on: Bad Security at Evite

You're absolutely correct, but in evite's case they are storing them permanently. That's actually the reason I posted this was that I forgot my password and requested a reset (~5 years after signup) and they sent it to me in plain text.