Plain-text passwords in emails
My experience with 123-reg was similar to the above. They sent me a password that i had entered into their site in an email, in plain text. When i tried to point out to them that this was a bad thing they kept insisting that the password they had sent me was generated, and that i shouldn't worry because "their web site is secure..." I eventually gave up talking to them. Now just waiting till i can move my business elsewhere.