Let's say your database with passwords is leaked or stolen:
If passwords are in plain-text, all your password are belong to us.
If passwords are hashed, all passwords are still in a shared bank-vault that must be cracked.
If passwords are hashed and salted, each password is in its own private bank-vault.
