Which means that they're storing your password in plaintext somewhere.
No, because you have to submit the old one along with the new one.