"Cryptographic hash" is technically correct, but it's also nerd speak. "Encrypted" gets the point across, which is probably more important than technical accuracy when you're sending out that email to hundreds of thousands of users with different levels of technical knowledge.
Same here. I got that email from eBay, and I'm still curious about how they're storing passwords.
That's a bigger *if* than you might think. It's not uncommon for an application to do a simple MD5 cryptographic hash on a password and store the hash. If that's the case, it's possible to break a pretty good number of passwords using rainbow tables. The *correct* way to do this is to "salt" the hash before storing it... and now I'm hungry.
If eBay had been doing it right, there shouldn't be anything to worry about, but it's usually best to assume that everyone is incompetent and act accordingly.