The passwords can be stolen and then you royally screwed your users who trusted you.

http://blog.moertel.com/articles/2006/12/15/never-store-pass...

http://stackoverflow.com/questions/287517/encrypting-hashing...

http://www.usenix.org/publications/login/2001-11/pdfs/singer...