The passwords were either stored as plain text or encrypted using the obsolete and insecure sha-1 dating.