Plaintext, sure, but it was certainly common still to use SHA-256 which is very quickly cracked if your password is short.