If you are a running an online store, and you require your customers to provide an email and password in order to shop, for God's sake don't then automatically email that password to them in plaintext! Sheesh. At least it isn't a site or password I ever expect to use again.
(There's a part of me that keeps expecting sites to learn at least the rudiments of online security. That part keeps being disappointed...)