Crowd store the SMTP server detail in plaintext, including the mail server e-mail address and credential.

Same like user credential, I believe Crowd should encrypt this sensitive information in its database.